EIP-2026-111485

This exploit demonstrates a CSRF vulnerability in Prediction League 0.3.8, allowing an attacker to create an admin user via a crafted HTML form. The PoC requires the victim to be authenticated and submit the form.