RPCMS v3.0.2 exists to contain a Cross-Site Request Forgery (CSRF) which allows malicious users to arbitrarily add an administrator account.
rpcms rpcms 3.0.2