CVE-2018-18797

School Attendance Monitoring System 1.0 has CSRF via /user/user/edit.php...