LFCMS version 3.7.0 suffers from an add administrator cross site request forgery vulnerability. Continue reading...