EIP-2026-105793

This is a functional CSRF exploit for CF Image Host 1.65-1.6.6, demonstrating how an attacker can modify application settings on behalf of an authenticated victim via a crafted HTML form.