EIP-2026-108449

This PHP script demonstrates a CSRF vulnerability in Mosets Tree 2.1.6 for Joomla, allowing an attacker to overwrite template files by tricking an admin into visiting a malicious page. The exploit submits a crafted POST request to save arbitrary PHP code into a template file.