EIP-2026-114551

This exploit demonstrates a CSRF attack leading to persistent XSS in YouTube Automated CMS versions 1.0.1 to 1.0.7. The PoC crafts a malicious HTML page that submits a form with an XSS payload in the 'title' field, exploiting lack of input sanitization and CSRF protection.