Vulnerability Details CVE-2022-26616
PKP Vendor Open Journal System v2.4.8 to v3.3.8 allows attackers to perform reflected cross-site scripting (XSS) attacks via crafted HTTP headers.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.01
EPSS Ranking 75.5%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 4.3
References
Products affected by CVE-2022-26616
-
cpe:2.3:a:public_knowledge_project:open_journal_systems:2.4.8
-
cpe:2.3:a:public_knowledge_project:open_journal_systems:2.4.8-1
-
cpe:2.3:a:public_knowledge_project:open_journal_systems:2.4.8-2
-
cpe:2.3:a:public_knowledge_project:open_journal_systems:3.0.0
-
cpe:2.3:a:public_knowledge_project:open_journal_systems:3.0.1
-
cpe:2.3:a:public_knowledge_project:open_journal_systems:3.0.2
-
cpe:2.3:a:public_knowledge_project:open_journal_systems:3.1.0
-
cpe:2.3:a:public_knowledge_project:open_journal_systems:3.1.0-1
-
cpe:2.3:a:public_knowledge_project:open_journal_systems:3.1.1
-
cpe:2.3:a:public_knowledge_project:open_journal_systems:3.1.1-1
-
cpe:2.3:a:public_knowledge_project:open_journal_systems:3.1.1-2
-
cpe:2.3:a:public_knowledge_project:open_journal_systems:3.1.1-4
-
cpe:2.3:a:public_knowledge_project:open_journal_systems:3.1.2
-
cpe:2.3:a:public_knowledge_project:open_journal_systems:3.1.2-1
-
cpe:2.3:a:public_knowledge_project:open_journal_systems:3.1.2-2
-
cpe:2.3:a:public_knowledge_project:open_journal_systems:3.1.2-3
-
cpe:2.3:a:public_knowledge_project:open_journal_systems:3.1.2-4
-
cpe:2.3:a:public_knowledge_project:open_journal_systems:3.2.0
-
cpe:2.3:a:public_knowledge_project:open_journal_systems:3.2.0-1
-
cpe:2.3:a:public_knowledge_project:open_journal_systems:3.2.0-2
-
cpe:2.3:a:public_knowledge_project:open_journal_systems:3.2.0-3
-
cpe:2.3:a:public_knowledge_project:open_journal_systems:3.2.0-4
-
cpe:2.3:a:public_knowledge_project:open_journal_systems:3.2.1
-
cpe:2.3:a:public_knowledge_project:open_journal_systems:3.2.1-1
-
cpe:2.3:a:public_knowledge_project:open_journal_systems:3.2.1-2
-
cpe:2.3:a:public_knowledge_project:open_journal_systems:3.2.1-3
-
cpe:2.3:a:public_knowledge_project:open_journal_systems:3.2.1-4
-
cpe:2.3:a:public_knowledge_project:open_journal_systems:3.2.1-5
-
cpe:2.3:a:public_knowledge_project:open_journal_systems:3.3.0-0
-
cpe:2.3:a:public_knowledge_project:open_journal_systems:3.3.0-1
-
cpe:2.3:a:public_knowledge_project:open_journal_systems:3.3.0-2
-
cpe:2.3:a:public_knowledge_project:open_journal_systems:3.3.0-3
-
cpe:2.3:a:public_knowledge_project:open_journal_systems:3.3.0-4
-
cpe:2.3:a:public_knowledge_project:open_journal_systems:3.3.0-5
-
cpe:2.3:a:public_knowledge_project:open_journal_systems:3.3.0-6
-
cpe:2.3:a:public_knowledge_project:open_journal_systems:3.3.0-7
-
cpe:2.3:a:public_knowledge_project:open_journal_systems:3.3.0-8