EIP-2026-104853

This exploit demonstrates a reflected XSS vulnerability and a CSRF vulnerability in 4PSA VoipNow Professional 2.5.3. The XSS is triggered via a crafted URL, while the CSRF allows an attacker to add a reseller by tricking an authenticated user into submitting a malicious form.