EIP-2026-110499

This is a functional CSRF PoC for Pay Banner Text Link Ad 1.0.6.1, allowing an attacker to update admin credentials via a crafted HTML form. The exploit demonstrates a lack of CSRF protection in the admin panel.