Ritawwang

The issue is related to CSRF, which can be exploited via the admin/users/new/add endpoint.

An issue was discovered that allows for a CSRF vulnerability, enabling the addition of a super administrator account via the "admin.php?c=a adminuser&a=add&run=1" endpoint. The `c`, `a`, and `run` variables are utilized in this process.

An issue was discovered that allows for CSRF via the "index.php?s=/admin/articlem/insert/navTabId/listarticle/callbackType/closeCurrent" URI.