pkp — Vulnerabilities & Security Advisories 19

PKP is an open-source software suite for scholarly publishing, primarily used by academic institutions to manage journals, conferences, and submission processes. Historically, common vulnerabilities include remote code execution, cross-site scripting, and privilege escalation, often stemming from insufficient input validation and access controls. Notable security characteristics include its widespread adoption in critical research infrastructure, making it a target for exploitation. While no major public incidents have been widely documented, the 19 CVEs on record highlight ongoing security challenges, particularly in areas like file handling and authentication. The software's complex architecture and extensive plugin ecosystem contribute to potential attack surfaces, requiring diligent maintenance and prompt patching by users.