Month Of Abysssec Undisclosed Bugs – CMSimple versions 3.2 and below suffer from a cross site request forgery vulnerability.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/93998/moaub18-cmsimple.pdf
Source: https://packetstormsecurity.com/files/93998/Month-Of-Abysssec-Undisclosed-Bugs-CMSimple-3.2.html