EIP-2026-109264

This is a functional CSRF PoC for Maian Weblog 4.0 that demonstrates how an attacker can trick an authenticated user into submitting a crafted POST request to add a new post without their consent. The exploit uses a hidden HTML form with JavaScript auto-submission to bypass user interaction.