CVE-2019-8408 (onefilecms)

OneFileCMS 3.6.13 allows remote attackers to modify onefilecms.php by clicking the Copy button twice.

Source: CVE-2019-8408 (onefilecms)