EIP-2026-111355

This exploit demonstrates a CSRF vulnerability in Pluck CMS 4.7, allowing an attacker to inject malicious HTML content into existing pages. The script automates the creation of HTML files that, when visited by an authenticated admin, submit a form to modify page content.