EIP-2026-106276

The exploit demonstrates multiple vulnerabilities in CumulusClips 2.4.1, including session fixation, XSRF leading to admin account creation, and persistent XSS. It provides functional PoC code for each vulnerability, including HTTP requests and HTML forms.