LiteCart up to and including 2.2.1 allows admin/?app=users&doc=edit_user CSRF to add a user.
litecart litecart