EIP-2026-109453

This is a functional CSRF exploit for Microweber CMS v0.93 that demonstrates how an attacker can create a new admin user via a crafted HTML form. The PoC includes a self-submitting form targeting the vulnerable API endpoint to add a user with admin privileges.