Exploit for Team Members < 5.0.4 - Authenticated Stored Cross-Site Scripting (XSS) CVE-2021-24128

Name: Exploit for Team Members < 5.0.4 - Authenticated Stored Cross-Site Scripting (XSS) CVE-2021-24128
Rating: 5 (318 reviews)

2020-05-16 | CVSS 1.1

## https://sploitus.com/exploit?id=WPEX-ID:11DC3325-E696-4C9E-BA10-968416D5C864
https://drive.google.com/file/d/1w5AmyBEOxAmtQ0T3uGKAB3o9w3ihNRAj/view

Add a user to a team, then use <img src=x onerror=alert(/XSS/)> in the 'Description/biography' field.