Subrion CMS 4.1.5 has CSRF in blog/delete/.

Source