Hello x3rz,
I was wandering about what was the CSRF payload you injected in the chatbox so u have got the admin privileges? Because I didn't get the exploitation very well.