EIP-2026-113352

This exploit targets WebsiteBaker 2.12.2, leveraging authenticated access to create a malicious code page that executes a reverse shell. It parses hidden form parameters to bypass CSRF protections and injects a PHP payload via the 'code' module.