Description UWA 2.3.11 allows index.php?g=admin&c=admin&a=add_admin_do CSRF. References https://github.com/AvaterXXX/CVEs/blob/master/UWA.md