Description emlog v6.0.0 has CSRF via the admin/user.php?action=new URI. References https://github.com/yanchongchong/swallow/issues/5