Cross site request forgery (csrf)

DESHANG DSCMS 1.1 has CSRF via the public/index.php/admin/admin/add.html URI...