Cross site request forgery (csrf)

pramodmahato BlogCMS through 2019-12-31 has admin/changepass.php CSRF...