EIP-2026-114536

This is a functional CSRF exploit for Yona CMS <= 1.3.x that adds an admin user by submitting a crafted form. The exploit leverages the absence of CSRF tokens in the admin-user/add endpoint.