CVE-2020-19886: Cross-Site Request Forgery (CSRF)

DBHcms v1.2.0 has no CSRF protection mechanism,as demonstrated by CSRF for an /index.php?dbhcmspid=-80&deletemenu=9 can delete any menu...