Team Password Manager (aka TeamPasswordManager) before 10.135.236 has a CSRF vulnerability during import.