[KIS-2025-14] PKP-WAL

Posted by Egidio Romano on Dec 27

—————————————————————–
PKP-WAL <= 3.5.0-1 Login Cross-Site Request Forgery Vulnerability
—————————————————————–

[-] Software Links:

https://pkp.sfu.ca
https://github.com/pkp/pkp-lib

[-] Affected Versions:

Version 3.3.0-21 and prior versions.
Version 3.4.0-9 and prior versions.
Version 3.5.0-1 and prior versions.

[-] Vulnerability Description:

Open…
 – Read More  – Full Disclosure