EIP-2026-105984

This is a functional CSRF exploit for CMS Made Simple 1.7.1 and prior, demonstrating how an attacker can trick a victim into submitting a crafted form to create a new admin user. The exploit leverages insufficient input sanitization and lack of CSRF protection.