CVE-2018-15702: Cross-Site Request Forgery (CSRF)

The web interface in TP-Link TL-WRN841N 0.9.1 4.16 v0348.0 is vulnerable to CSRF due to insufficient validation of the referer field...