CVE-2023-5897

CVE-2023-5897 describes a Cross-Site Request Forgery in PKP’s customLocale plugin (pkp/customLocale) prior to 1.2.0-1, affecting the plugin used with OPS/OJS/OMP. The vulnerability enables CSRF where an attacker can induce a user to perform unwanted actions in a targeted application, as indicated...