EIP-2026-113382

This exploit demonstrates a CSRF vulnerability in Webutler CMS 3.2, allowing an attacker to change the administrator's password by tricking them into visiting a malicious webpage. The PoC includes a crafted HTML form that submits a POST request to the vulnerable endpoint without requiring user interaction.