CVE-2020-15014

pramodmahato BlogCMS through 2019-12-31 has admin/changepass.php CSRF.