Cross-Site Request Forgery (CSRF) in GitHub repository pkp/ojs before 3.3.0-16.
sfu open journal system