Media CP Media Control Panel latest version. CSRF possible through unspecified endpoint.
CWE-352, CWE-352