EIP-2026-110272

This exploit demonstrates a CSRF vulnerability in OpenCart 3.0.3.7, allowing an attacker to change a user's password without their consent by tricking them into submitting a crafted form. The PoC includes a simple HTML form that submits a password change request when interacted with.