CVE-2018-12588

Published
View on NVD ↗
CVSS v3
N/A
CVSS v2
4.3
MEDIUM
Affected
2
PROJECTS

Description

Cross-site scripting (XSS) vulnerability in templates/frontend/pages/searchResults.tpl in Public Knowledge Project (PKP) Open Monograph Press (OMP) v1.2.0 through 3.1.1-2 before 3.1.1-3 allows remote attackers to inject arbitrary web script or HTML via the catalog.noTitlesSearch parameter (aka the Search field).

pkp/pkp-lib
pkp/pkp-lib
The library used by PKP's applications OJS, OMP and OPS, open source software for scholarly publishing.
GitHubGitHub
344
pkp/omp
pkp/omp
Open Monograph Press is open source software to manage scholarly presses.
GitHubGitHub
141