Sploitus

Exploit for WP Reactions Lite < 1.3.6 - Authenticated Stored Cross Site Scripting

CVE-2021-24723

wpexploit · 2021-09-28

Exploit Code

MARKDOWN5 lines
## https://sploitus.com/exploit?id=WPEX-ID:0A46AE96-41E5-4B52-91C3-409F7387AECC
* Open  Global Activation and Click on Customize Now
* On Step3 (StylingTab) >> Enter the XSS payload into "Whats your reaction" field
Payload Used : "><script>alert(document.location)</script>
* Click On Save and Exit Button and Alert will popup every time a Global Activation step is loaded.