CVE-2020-23836

This is a functional CSRF exploit targeting Warehouse Inventory System 1.0, allowing an attacker to change the admin password by tricking an authenticated admin into visiting a malicious page. The exploit uses a hidden HTML form to submit a POST request to the vulnerable endpoint.