EIP-2026-113448

This is a CSRF exploit targeting Wizmall 6.4 UTF-8 for PHP, allowing an attacker to change the admin ID and password by tricking an authenticated admin into visiting a malicious page. The exploit submits a crafted POST request to the vulnerable endpoint.