This vulnerability involves CSRF in the Users.php file of SourceCodester Packers and Movers Management System version 1.0. An attacker can exploit this by tricking an authenticated admin user into submitting a crafted request, resulting in the creation of unauthorized admin accounts. The vulnerability does not impact confidentiality or availability but has a high impact on integrity. There is no known exploit in the wild and no vendor advisory or patch information currently available.

Successful exploitation allows an attacker to create unauthorized administrative accounts, compromising the integrity of the system by granting elevated privileges without authorization. There is no direct impact on confidentiality or availability according to the CVSS vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, administrators should be cautious about the actions performed while authenticated and consider implementing CSRF protections such as anti-CSRF tokens or verifying the origin of requests if possible.