Responsible Disclosure of CSRF in PHP Fusion 9