EIP-2026-106015

This exploit demonstrates multiple XSS and CSRF vulnerabilities in CMSimple 3.3 by submitting crafted forms that inject malicious JavaScript into various fields, such as 'text', 'site_title', and 'template'. The PoC automatically submits these forms to trigger the vulnerabilities.