CSRF in extension "femanager" (femanager)

The extension fails to implement a CSRF protection for edit and delete actions...