EIP-2026-112945

This exploit demonstrates a CSRF (Cross-Site Request Forgery) vulnerability in Vacation Rental Script v4.0, allowing an attacker to modify a user's profile, including elevating privileges to admin. The PoC is a crafted HTML form that submits malicious data to the target endpoint.