Cross site request forgery (csrf)

Gleez CMS 1.2.0 has CSRF, as demonstrated by a /page/add request...