EIP-2026-107258

This exploit demonstrates a Cross-Site Request Forgery (CSRF) vulnerability in Frog CMS <= 0.9.5, allowing an attacker to change the admin password and permissions via a crafted HTML form. The PoC is a simple form submission that modifies user details without requiring authentication tokens.