CVE-2017-17990

Biometric Shift Employee Management System has CSRF via index.php in an editholiday action...