EIP-2026-119453

This advisory details CSRF and XSS vulnerabilities in Wing FTP Server Admin 4.4.5, allowing remote attackers to add arbitrary users via crafted URLs. The PoC demonstrates exploitation through the `domain` and `type` parameters in admin pages.