EIP-2026-105539

This HTML file demonstrates a CSRF vulnerability in bloofoxCMS 0.5.0, allowing an attacker to add an admin user by tricking an authenticated admin into visiting the page. The form submits automatically via JavaScript, exploiting lack of CSRF protection.