## https://sploitus.com/exploit?id=WPEX-ID:A5579C15-50BA-4618-95E4-04B2033D721F
1. Add the "NextGEN Media RSS" Widget to the blog (Appearance > Widgets)
2. Change the "Tooltip text for Media RSS link" to `feed" asdasd='' onmouseover='alert(1)'`
3. Save the settings and view the site
4. Move your mouse over the icon/text to see the XSS