Get Demo
The lacks CSRF checks allowing a user to invite any user to any group (including private groups)