EIP-2026-111498

This is a functional CSRF-to-RCE exploit for PrestaShop <= 1.7.6.4. It leverages a malicious SVG file upload to execute arbitrary JavaScript, which then imports a remote theme containing a backdoor, achieving remote code execution.