CVE-2020-9018

LiteCart through 2.2.1 allows admin/?app=users&doc=edituser CSRF to add a user...