EIP-2026-105700

This exploit demonstrates a CSRF vulnerability in Campsite 3.3.5, allowing an attacker to delete an admin user by tricking them into visiting a malicious HTML page. The PoC uses an img tag to trigger a request to the vulnerable endpoint without user interaction.