Cross Site Request Forgery (CSRF) vulnerability in FlyCms 1.0 allows attackers to add arbitrary administrator accounts via system/admin/admin_save.Referenceshttps://github.com/sunkaifei/FlyCms/issues/8https://github.com/sunkaifei/FlyCms