EIP-2026-112648

This exploit demonstrates multiple CSRF vulnerabilities in TheHostingTool 1.2.2, allowing actions such as creating staff accounts, deleting staff accounts, sending mass emails, and logging out administrators without user interaction.