EIP-2026-104902

This exploit demonstrates a CSRF vulnerability in Acal Calendar 2.2.6, allowing attackers to perform actions such as adding users, editing headers/footers, and injecting HTML via crafted forms and URLs. The PoC includes ready-to-use HTML forms for exploitation.