HelpDEZk 1.1.1 has CSRF in admin/home#/person/ with an impact of obtaining admin privileges.