Description pramodmahato BlogCMS through 2019-12-31 has admin/changepass.php CSRF. References https://github.com/pramodmahato/BlogCMS/issues/1