EIP-2026-114071

This exploit demonstrates a CSRF vulnerability in the Social Media Widget by Acurax (version 3.2.5) that allows an attacker to perform a persistent XSS attack by manipulating the `recordsArray` parameter. The vulnerability arises due to the lack of anti-CSRF controls in the `acx_asmw_saveorder_callback` function.