CVE-2018-12971: Cross-Site Request Forgery (CSRF)

EasyCMS 1.3 has CSRF via the index.php?s=/admin/user/delAll URI to delete users...