EIP-2026-104850

This exploit demonstrates a CSRF vulnerability in 4images 1.7.7, allowing an attacker to change the email of a user or admin by tricking them into visiting a malicious page. The PoC submits a form with hidden fields to update the email without user interaction.