EIP-2026-111844

This exploit demonstrates a CSRF vulnerability to change the admin password and an XSS vulnerability in RuubikCMS 1.0.3. The CSRF PoC automatically submits a form to change the admin password, while the XSS is triggered via a crafted URL.