An issue was discovered in jizhicms v2.3.1. There is a CSRF vulnerability that can add a admin.
CWE-352