An issue was discovered in EMLsoft 5.4.5. The eml/upload/eml/?action=user&do=add page allows CSRF.Referenceshttps://github.com/AvaterXXX/emlsoft/blob/master/README.md