EIP-2026-107729

This exploit demonstrates a CSRF vulnerability in ICEHRM 31.0.0.OS, allowing an attacker to delete arbitrary user accounts by tricking a victim into submitting a crafted HTML form. The PoC includes a functional HTML form that sends a POST request to delete a user without requiring a CSRF token.