CVE-2020-19889: Cross-Site Request Forgery (CSRF)

DBHcms v1.2.0 has no CSRF protection mechanism,as demonstrated by CSRF for index.php?dbhcmspid=-70 can add a user...