EIP-2026-111275

This exploit demonstrates a session hijacking vulnerability in pimCore v5.4.18-skeleton due to improper SameSite attribute handling in PHPSESSID cookies. The PoC uses Selenium to inject a stolen session cookie and gain unauthorized access.