Concrete5 versions 5.7.3.1 and below suffer from multiple cross site request forgery vulnerabilities.