simple-cms has Cross-site request forgery

[SunJ3t]

http://192.168.2.129/simple/admin/?delpage=8

I can delete any page when I send the url to administrator.
I can also use the Short DomainNames to encode the url.