Cscms 4.1.8 allows admin.php/links/save CSRF to add, modify, or delete friend links.
chshcms cscms 4.1.8