CVE-2017-17990

Biometric Shift Employee Management System has CSRF via index.php in an edit_holiday action.

Source: CVE-2017-17990