Pkp

PKP (Public Knowledge Project) maintains a modest but widely used suite of scholarly publishing and journal-management software, with Open Journal Systems serving as its primary deployed product across academic institutions globally. The vendor's vulnerability profile concentrates on web-application security issues endemic to systems handling user input and session state, with recurrent weaknesses including cross-site request forgery, path traversal, cross-site scripting, and insufficient session expiration; these classes are characteristic of platforms managing editorial workflows and user authentication across distributed deployments. Current exploitation activity, severity distribution, and exposure counts are shown alongside this summary.