Xichao

A CSRF issue allows attackers to execute arbitrary PHP code via the `content` parameter to "index.php?m=admin&c=media&a=fileconnect" API endpoint.

An issue was discovered that allows for a CSRF vulnerability, enabling the addition of an admin account via the "index.php?m=admin&c=access&a=adduserhandle" endpoint.