CVE-2018-11126

dg-user/?controller=users&action=add in doorGets 7.0 has CSRF that results in adding an administrator account.

Source: CVE-2018-11126