EIP-2026-106918

This exploit demonstrates a CSRF vulnerability in ETchat CMS (Persian version) that forces an authenticated admin to create a new room with an XSS payload. The payload redirects the victim to an attacker-controlled site while exfiltrating the victim's cookies.