Security Advisory
CVE-2022-26616
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
PKP Vendor Open Journal System v2.4.8 to v3.3.8 allows attackers to perform reflected cross-site scripting (XSS) attacks via crafted HTTP headers.