EIP-2026-113912

This is a functional CSRF exploit for Multisite Post Duplicator 0.9.5.1, allowing an attacker to inject arbitrary HTML (e.g., XSS payloads) into a WordPress multisite installation by tricking an admin into submitting a crafted form.