status_services.php: AJAX requests via GET can control services without CSRF validation
Plus Target Version:
Using a GET request to status_services.php with a sepcially-crafted URL, services can be controlled by visiting a URL without confirmation. For example:
Only matters against 2.4.3, since the GET/POST conversion work was only on the 2.4.x line.