EIP-2026-110570

This is a CSRF exploit for PG Portal pro that allows an attacker to change the admin password by tricking an authenticated admin into submitting a malicious form. The exploit leverages a lack of CSRF protection in the admin_settings.php endpoint.