EIP-2026-106961

The document describes two vulnerabilities in Explay CMS <= 2.1: a persistent XSS due to inadequate input filtering and a CSRF vulnerability allowing privilege escalation. It provides specific attack vectors but lacks functional exploit code.