EIP-2026-108491

The exploit demonstrates a CSRF vulnerability in JSN PowerAdmin Joomla! Extension that allows an authenticated user to upload a malicious PHP file via a crafted HTTP request, bypassing file validation checks. Additionally, it includes an XSS vulnerability that can execute arbitrary JavaScript in the context of an administrator's session.