EIP-2026-110274

This is a technical writeup describing a CSRF vulnerability in OpenCart 3.0.3.6 that allows account takeover by tricking a victim into submitting a crafted request to the /account/edit endpoint. The steps outline how an attacker can change a victim's account details, including email, to gain control via password reset.