EIP-2026-105549

This is a functional CSRF exploit for bloofoxCMS that crafts a malicious HTML form to add an admin user without the victim's consent. The PoC demonstrates the vulnerability by submitting a POST request with hidden form fields to the target endpoint.