EIP-2026-108692

The exploit demonstrates a Cross-Site Request Forgery (CSRF) vulnerability in Joomla! extension jCart for OpenCart 2.3.0.2. It includes functional HTML/JS PoC code to change user information, password, and affiliate account details without user interaction.