JFinalCMS v5.0.0 exists to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /admin/friend_link/save.
jfinalcms project jfinalcms 5.0.0