EIP-2026-113432

This is a functional CSRF exploit for WikiWebHelp that demonstrates how an attacker can change the password of any user, including the administrator, by tricking them into submitting a malicious form. The exploit leverages the lack of CSRF protection in the application.