EIP-2026-109956

This is a functional CSRF (Cross-Site Request Forgery) exploit for NooMS CMS version 1.1.1. It demonstrates how an attacker can trick an authenticated admin into submitting a crafted form to change admin credentials and other site settings.