Gila CMS 1.10.1 allows fm/save CSRF for executing arbitrary PHP code.
- https://cisk123456.blogspot.com/2019/04/gila-cms-1101-csrf.html
No PoCs found on GitHub currently.