EIP-2026-111850

This is a functional CSRF exploit for RV Shopping Cart that adds an admin user via a crafted HTML form. The exploit submits a POST request to user-add.php with predefined admin credentials.