CVE-2018-13010: Cross-Site Request Forgery (CSRF)

WSTMall v1.9.1170316 has CSRF via the index.php?m=Admin&c=Users&a=edit URI to add a user account...