[xwiki-notifications] [jira@xwiki.org][Issue] (ADMINTOOL-92) CSRF with QueryOnXWiki allows arbitrary database queries