CVE-2022-24181

Cross-site scripting (XSS) via Host Header injection in PKP Open Journals System 2.4.8 >= 3.3 allows remote attackers to inject arbitary code via the…

published April 1, 2022

CVSS
—
EPSS
6%
Percentile
93.4
In the wild
Unconfirmed
What it is

Cross-site scripting (XSS) via Host Header injection in PKP Open Journals System 2.4.8 >= 3.3 allows remote attackers to inject arbitary code via the X-Forwarded-Host Header.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06080 · 93.4th percentile
Published
2022-04-01T11:42Z
EPSS history
Timeline
  • 01 APR 11:42Z
    Cross-site scripting (XSS) via Host Header injection in PKP Open Journals System 2.4.8 >= 3.3 allows remote attackers to inject arbitary code via the…
    cvelistv5