Fix CSRF import: use from flask_wtf import csrf_exempt

app/upload/routes.py

@@ -5,7 +5,7 @@ import shutil
 from flask import request, jsonify, render_template, redirect, url_for, flash, current_app
 from flask_login import login_required, current_user
 from flask_jwt_extended import jwt_required, get_jwt_identity
-from flask_wtf.csrf import csrf_exempt
+from flask_wtf import csrf_exempt
 from werkzeug.utils import secure_filename
 from app.upload import bp
 from app import db