Sploitus

Exploit for Sign-up Sheets < 1.0.14 - Authenticated Stored Cross-Site Scripting (XSS)

wpexploit Β· 2021-06-21

Exploit Code

MARKDOWN4 lines
## https://sploitus.com/exploit?id=WPEX-ID:BA4503F7-684E-4274-BC53-3AA848712496
As admin, add a new Sheet and add the following payload in the "Title", "Details" and "Task" fields: <script>alert("Test")</script>

The XSS will be trigger whenever an admin goes to the All Sheets page.