Filters apply as you choose them.
JIZHICMS 1.5.1 allows admin.php/Admin/adminadd.html CSRF to add an administrator.