An issue exists in idreamsoft iCMS V7.0. admincp.php?app=members&do=del allows CSRF.
idreamsoft icms 7.0.0