CVE-2019-5924
Cross-site request forgery (CSRF) vulnerability in Smart Forms 2.6.15 and earlier allows remote attackers to hijack the authentication of administrators via a specially crafted page.
Date published : 2019-03-12
http://jvn.jp/jp/JVN97656108/index.html