EIP-2026-106940

This exploit demonstrates SQL injection, XSS, and CSRF vulnerabilities in Eventy Online Scheduler V1.8. The SQLi allows for data extraction, while the XSS and CSRF can be used for session hijacking and unauthorized admin creation.