EIP-2026-109524

This is a Cross-Site Request Forgery (CSRF) proof-of-concept exploit targeting Mcard - Mobile Card Selling Platform version 1. It demonstrates how an attacker can trick a victim into submitting a malicious form to update their profile information without their consent.