< 5.3
5.3
C.P.Sub before 5.3 allows CSRF via a manage.php?p=article_del&id= URI.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.