EIP-2026-112906

This exploit demonstrates a CSRF vulnerability to add an admin user and multiple reflected XSS vulnerabilities in up.time 7.5.0. The CSRF PoC submits a form to create an admin user, while the XSS examples show unsanitized input in various parameters.