EIP-2026-107944

This is a functional CSRF exploit for IonizeCMS <= 1.0.8 that adds an admin user by submitting a crafted form. The exploit leverages the absence of CSRF tokens in the application.