A list moderator or list member can potentially carry out a CSRF attach by getting a list admin to visit a crafted web page
A list moderator or list member can potentially carry out a CSRF attach by getting a list admin to visit a crafted web page