## https://sploitus.com/exploit?id=WPEX-ID:252DFC35-4C8C-4304-AA09-73DFE986B10D
Create/Edit a Post, add an "Icon" block and put the following payload in the "Link Settings > Link URL: " field: 123" onmouseover='alert(/XSS/)'
The XSS will be triggered when viewing/previewing the post and moving the mouse over the icon