EUVD-2018-11234

Malware in sbrugna...

Cross site request forgery (csrf)

JEECMS 9.3 has CSRF via the api/admin/role/save URI to add a user...