EIP-2026-111344

This exploit demonstrates an XSRF protection bypass and captcha bypass in Pligg 9.9.5. It uses an iframe to inject JavaScript for automated voting and a PHP script to decode the captcha by leveraging predictable server-side logic.