EIP-2026-111339

This exploit demonstrates a CSRF vulnerability in Pligg CMS 2.0.2, allowing arbitrary PHP code execution via the admin panel's page addition feature. The PoC submits a form with PHP code embedded in {php} tags, which gets executed when the page is accessed.