CVE-2023-5897 MEDIUM

CVE-2023-5897: Cross-Site Request Forgery (CSRF) in pkp/customLocale

Vendor Pkp
Product pkp/customLocale
Weakness CWE-352 · CSRF
Published November 1, 2023
Last update February 27, 2025
View on NVD All CVEs

CVSS base score

6.3/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction Required
Confidentiality High
Integrity Low

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N

What the vulnerability does

01Description

Cross-Site Request Forgery (CSRF) in GitHub repository pkp/customLocale prior to 1.2.0-1.

Key dates

02Disclosure timeline

November 1, 2023 CVE published
February 27, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2023-32579 WordPress Forget About Shortcode Buttons Plugin <= 2.1.2 is vulnerable to Broken Access Control CVE-2024-27197 WordPress BeePress plugin <= 6.9.8 - CSRF to Stored Cross Site Scripting (XSS) vulnerability CVE-2024-0592 Related Posts for WordPress <= 2.2.1 - Cross-Site Request Forgery CVE-2022-0445 WordPress Real Cookie Banner < 2.14.2 - Settings Reset via CSRF CVE-2025-32272 WordPress Wishlist plugin <= 1.0.46 - Cross Site Request Forgery (CSRF) vulnerability