FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/admin/update_group_save.Referenceshttps://github.com/biantaibao/cms/blob/main/1.md