CVE-2017-17903

FS Lynda Clone has CSRF via user/edit_profile, as demonstrated by adding content to the user panel.

Source: CVE-2017-17903