dg-user/?controller=users&action=add in doorGets 7.0 has CSRF that results in adding an administrator account.Referenceshttps://github.com/doorgets/CMS/issues/11
