EIP-2026-106823

This is a CSRF exploit targeting Electricks eCommerce 1.0, allowing an attacker to change the admin password by tricking an authenticated admin into submitting a malicious form. The PoC demonstrates a simple HTML form that submits a POST request to the vulnerable endpoint.