EIP-2026-109015

This is a detailed vulnerability writeup describing a CSRF and PHP file upload vulnerability in Kirby CMS <= 2.1.0. It explains how an attacker can bypass file extension and MIME type checks to upload and execute arbitrary PHP code.