EIP-2026-112787

This is a functional CSRF exploit for Travel PORTAL that allows an attacker to change the admin password by tricking an authenticated admin into submitting a crafted form. The exploit leverages a lack of CSRF tokens in the password change functionality.