EIP-2026-102522

The exploit demonstrates multiple CSRF vulnerabilities in Openfire 3.6.4's administrative section, allowing attackers to perform actions such as creating users, changing passwords, deleting users, and managing groups by tricking authenticated administrators into visiting malicious URLs.