Sploitus

Exploit for WP Google Review Slider < 13.6 - Admin+ Stored XSS

wpexploit Β· 2024-04-05

Exploit Code

MARKDOWN5 lines
## https://sploitus.com/exploit?id=WPEX-ID:7A2C173C-19E3-4F48-B3AF-14790B5B8E94
1. Go to "WP Google Reviews> Templates" and click on "Add New Reviews Template" 
2. Save the settings and intercept the request.
3. Change the `wprevpro_template_misc_bgcolor1` parameter to `#asd"onmouseover=alert(112312)//`
4. Reload the template and select the BG color and mouseover to see the XSS