Description Lei Feng TV CMS (aka LFCMS) 3.8.6 allows admin.php?s=/Member/add.html CSRF. References https://github.com/AvaterXXX/CVEs/blob/master/lfdycms.md#csrf