cskefu v7 suffers from Insufficient Session Expiration, which allows attackers to exploit the old session for malicious activity.
https://github.com/cskefu/cskefu/pull/803
https://github.com/cskefu/cskefu/issues/781
https://gist.github.com/menghaining/8d424faebfe869c80eadaea12bbdd158