EIP-2026-107259

The exploit demonstrates multiple CSRF vulnerabilities in Frog CMS 0.9.5, allowing actions such as creating an admin user, deleting users/pages/snippets/layouts/files, and logging out the administrator. The PoC uses HTML forms and image tags to trigger unauthorized actions when loaded by an authenticated user.