CMS EditMe suffers from cross site request forgery vulnerability that allows for privilege escalation.