EIP-2026-107452

This is a functional CSRF exploit for Gökhan Balbal v2.0, allowing an attacker to add an admin user by tricking a victim into submitting a crafted form. The exploit demonstrates a lack of CSRF protection in the admin user creation endpoint.