Language: JavaScript
Label: safe
CWE: CWE-352 \u2014 Cross-Site Request Forgery (CSRF)
The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

Code:
function sendBulkSMS(url) {

    var table = $('#dataTableWithAjaxExtend').DataTable();

    //var data = table.columns( 0 ).data();
    var rows = table.rows({ selected: true }).indexes();
    var data = table.cells(rows, 0).data();
    var number = [];

    $.each(data, function (key, num) {

        if (num != "" || num != null || num != 'NULL' || num != 0 || num != '0') {
            number.push(num);
        }

    });


    $("#modalDefault").modal('show').find('.modal-content').load(url + encodeURI(number.join()));

}