What’s Vulnerable › Products

PKP Open Journal Systems vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your PKP Open Journal Systems version is affected

Latest PKP Open Journal Systems vulnerabilities

• CVE-2026-111609 — PKP Open Journal Systems through 3.5.0-5 Cross-Journal Subscription IDOR via updateSubscription (CVSS 3.8)
• CVE-2024-25436 — (CVSS 6.1)
• CVE-2023-5894 — Cross-site Scripting (XSS) - Stored in pkp/ojs (CVSS 5.4)