EIP-2026-109573

This is a CSRF exploit for Monstra-dev 3.0.4 that allows an attacker to hijack a user account by modifying user data such as email and password. The PoC demonstrates a crafted HTML form that submits a malicious POST request to the vulnerable endpoint.