CMS Made Simple (aka CMSMS) 2.2.7 has CSRF in admin/moduleinterface.php.Referenceshttps://github.com/zxyxx/cmsms_vul