Cross site request forgery (csrf)

School Event Management System 1.0 allows CSRF via user/controller.php?action=edit...