EIP-2026-114576

This exploit demonstrates an insecure cookie handling vulnerability in ZaoCMS, allowing an attacker to bypass authentication by setting an admin cookie via JavaScript. The PoC involves manipulating the cookie to gain unauthorized access to the admin panel.