EIP-2026-105207

The exploit demonstrates a CSRF vulnerability in appRain CMF 3.0.2, allowing unauthorized actions such as deleting admin rows and adding new admin users via crafted HTML forms. The PoC includes functional code to trigger these actions without user interaction.