EIP-2026-112465

This exploit demonstrates a CSRF bypass in Subrion CMS 4.0.5 by using a fixed-length string to bypass the anti-CSRF token, leading to persistent XSS and unauthorized admin creation. The PoC includes crafted HTML/JavaScript to trigger the vulnerability.