EIP-2026-114624

The exploit demonstrates a CSRF vulnerability in ZeusCart 4.0, allowing an attacker to deactivate customer accounts by tricking a victim into visiting a malicious page. The PoC uses an HTML image tag to send a crafted request to the admin endpoint.