pramodmahato BlogCMS through 2019-12-31 has admin/changepass.php CSRF.
Published June 24, 2020.
Pramod Blogcms