ThinkCMF version 6.0.7 is affected by a Cross Site Request Forgery (CSRF) vulnerability that allows a Super Administrator user to be injected into administrative users.Referenceshttps://github.com/thinkcmf/thinkcmf/issues/736
