Biometric Shift Employee Management System has CSRF via index.php in an edit_holiday action.
iwcnetwork biometric shift employee management system 4.0