CVE-2018-19561

sikcms 1.1 has CSRF via admin.php?m=Admin=Users=userAdd to add an administrator account...