EIP-2026-111294

The exploit demonstrates stored XSS and CSRF vulnerabilities in Piwigo 2.5.3 CMS. The XSS payloads are executed in album names and group names, while the CSRF PoC automates user creation via a malicious form submission.