[xwiki-notifications] [[email protected]][Issue] (ADMINTOOL-92) CSRF with QueryOnXWiki allows arbitrary database queries