EIP-2026-112395

This exploit demonstrates a CSRF vulnerability in Spitefire CMS 1.1.4, allowing attackers to add/edit administrator accounts or upload malicious files without user interaction. The PoC includes HTML/JavaScript for CSRF and details on file upload manipulation.