EIP-2026-105240

This exploit demonstrates a CSRF vulnerability in the admin module of Article Friendly, allowing an attacker to delete an admin user by tricking them into visiting a crafted HTML page. The PoC uses an img tag to trigger the deletion via a GET request to the vulnerable endpoint.