EIP-2026-106443

This exploit demonstrates multiple CSRF vulnerabilities in Diferior CMS 8.03, allowing an attacker to change admin passwords, emails, ban users, or log out users via crafted HTML forms. The PoC is functional and requires no authentication, relying on social engineering to trick victims into visiting malicious pages.