Exploit for Frontend Checklist <= 2.3.2 - Admin+ Stored XSS CVE-2024-4957

Name: Exploit for Frontend Checklist <= 2.3.2 - Admin+ Stored XSS CVE-2024-4957
Rating: 5 (23 reviews)

2024-06-05 | CVSS 5.7

## https://sploitus.com/exploit?id=WPEX-ID:0A560ED4-7DEC-4274-B4A4-39DEA0C0D67E
1. Go to frontend-checklist admin settings to create a new checklist (options-general.php?page=frontend-checklist&action=new)
2. In the creation page, set the name field to `<script>alert(1)</script>`
3. Save the changes and go to listing page to see the XSS (options-general.php?page=frontend-checklist)