= 3.3.6
letodms 3.3.6 has CSRF via change password
Running one of these products? Scan your site to see whether it exposes a vulnerable version.