EIP-2026-106668

This is a functional CSRF PoC for e107 CMS 2.1.4, demonstrating how an attacker can uninstall plugins via forged requests. The exploit leverages missing CSRF tokens in the plugin management interface.