CVE-2019-16719

WTCMS 1.0 allows index.php?g=admin=index=index CSRF with resultant XSS...