[安全]新蜂商城（newbee-mall）GET /admin/logout 接口缺少 CSRF 防护，可被诱导触发强制登出。

/admin/logout` uses the GET method and only relies on session authentication to perform the logout operation, without requiring any CSRF token or custom request headers. Attackers can construct pages that submit malicious forms, inducing logged-in administrators to visit the page, which will force them to log out, causing a disruption in backend availability and social engineering.