EIP-2026-112365

This is a functional CSRF PoC that demonstrates how an attacker can trick an authenticated user into submitting a crafted POST request to add a new post in Spacemarc News. The exploit uses XMLHttpRequest to send a multipart/form-data payload to the vulnerable endpoint.