EIP-2026-105113

This exploit demonstrates a Cross-Site Request Forgery (XSRF/CSRF) vulnerability in Web Links 1.0, allowing an attacker to add an admin user by tricking an authenticated admin into submitting a malicious form. The form includes predefined values for username, password, and group_id to escalate privileges.