pramodmahato BlogCMS through 2019-12-31 has admin/changepass.php CSRF.
- https://github.com/pramodmahato/BlogCMS/issues/1
No PoCs found on GitHub currently.