EIP-2026-105029

This is a Cross-Site Request Forgery (CSRF) exploit for AIOCP 1.4.001 that crafts a malicious HTML image tag to trick an authenticated admin into creating a new admin account. The exploit leverages a lack of CSRF tokens in the user editing functionality.