Exploit for Post Views Counter < 1.3.5 - Authenticated Stored XSS CVE-2021-24613

Name: Exploit for Post Views Counter < 1.3.5 - Authenticated Stored XSS CVE-2021-24613
Rating: 5 (315 reviews)

2021-08-23 | CVSS 3.5

## https://sploitus.com/exploit?id=WPEX-ID:0B8C5947-BC73-448E-8F10-A4F4456E4000
Put the following payload in the Post Views Label settings of the plugin (?wp-admin/options-general.php?page=post-views-counter&tab=display): <script>alert(/XSS/)</script>

The XSS will be triggered in any posts (by default), but could also be changed to any pages etc.