CVE-2017-7571by Jeremyin Security Bulletinson Posted on April 6, 2017 public/rolechangeadmin in Faveo 1.9.3 allows CSRF. The impact is obtaining admin privileges.