KODExplorer web file manager versions 3.21 and below suffer from multiple cross site request forgery vulnerabilities.