Advisto PEEL Shopping 9.2.1 has CSRF via administrer/utilisateurs.php to delete a user.
peel peel shopping 9.2.1