EIP-2026-110575

This is a CSRF PoC that exploits the lack of security tokens in Pharmacy Point of Sale System 1.0 to add a new administrator user via a crafted POST request. The exploit is delivered through an HTML form that auto-submits upon page load.