EIP-2026-105589

This is a functional CSRF exploit for Booking System Pro that adds an admin user via a crafted HTML form. The exploit submits a POST request to the target's admin endpoint with predefined credentials.