EIP-2026-107441

This is a functional CSRF exploit for Gnew CMS 2018.1 that allows privilege escalation by submitting a crafted POST request to the admin users.php endpoint. The exploit demonstrates how an attacker can escalate a user's privileges to level 4 (admin) via a malicious HTML form.