Cross-site request forgery (CSRF) in PbootCMS 1.3.2 allows attackers to change the password of a user.
- https://github.com/AvaterXXX/PbootCMS/blob/master/CSRF.md
No PoCs found on GitHub currently.