CVE-2018-18799

School Attendance Monitoring System 1.0 has CSRF via event/controller.php?action=photos...