EIP-2026-107260

The exploit demonstrates multiple CSRF and XSS vulnerabilities in Frog CMS 0.9.5, allowing arbitrary JavaScript execution and unauthorized actions via crafted HTTP requests. The PoC includes forms with malicious payloads that exploit unsanitized input in various controller scripts.