EIP-2026-114575

This is a functional HTML form-based exploit for ZaoCMS that allows an attacker to change the admin password without authentication by submitting a crafted POST request to the user_updated.php endpoint.