Share
## https://sploitus.com/exploit?id=WPEX-ID:368828F9-FDD1-4A82-8658-20E0F4C4DA0C
Add or Edit a Characteristic (/wp-admin/admin.php?option=com_vikrentcar&task=carat)) with the following payload in the 'Text Next to Icon' field: <script>alert(/XSS/)</script>

Then view the Characteristics List to trigger the XSS