EIP-2026-106012

This exploit demonstrates a Cross-Site Request Forgery (XSRF) vulnerability in CMSimple <=3.2, allowing an attacker to change admin passwords, user types, or deface the website by tricking an authenticated admin into submitting a malicious form.