EIP-2026-114465

This is a functional CSRF exploit for Xoops 2.5.7.2 that deletes users from the database by submitting a crafted POST request to the admin.php endpoint. The JavaScript automates the deletion of up to 100 users sequentially.