EIP-2026-106125

The exploit demonstrates multiple CSRF and Stored XSS vulnerabilities in concrete5 CMS v5.6.1.2, including modifying SMTP settings, mail importer settings, deleting form results, and executing arbitrary JavaScript via stored XSS payloads.