CVE-2018-16431: Cross-Site Request Forgery (CSRF)

admin/admin/adminsave.html in YFCMF v3.0 allows CSRF to add an administrator account...