CVE-2024-56525 | pkp OJS/OMP/OPS prior 3.3.0.21/3.4.0.8 User XML Plugin backdoor

A vulnerability, which was classified as critical, was found in pkp OJS, OMP and OPS. Affected is an unknown function of the component User XML Plugin Handler. The manipulation leads to backdoor.

This vulnerability is traded as CVE-2024-56525. The attack can only be done within the local network. There is no exploit available.

It is recommended to upgrade the affected component.