Exploit for Poll Maker < 4.0.2 - Admin+ Stored Cross-Site Scripting CVE-2022-1456

Name: Exploit for Poll Maker < 4.0.2 - Admin+ Stored Cross-Site Scripting CVE-2022-1456
Rating: 5 (68 reviews)

2022-05-04 | CVSS 3.5

## https://sploitus.com/exploit?id=WPEX-ID:1F41FC5C-18D0-493D-9A7D-8B521AB49F85
Put the following payload in any of the Mailchimp integration settings (/wp-admin/admin.php?page=poll-maker-ays-settings&ays_poll_tab=tab2) and save: "><img src onerror=alert(/XSS/)>