Share
## https://sploitus.com/exploit?id=WPEX-ID:36AAE14E-4BDF-4DA6-A0F9-D71935105D45
* Open the plugin's add new banner page (B.com Banner -> Add New Banner)
* The form field named "Banner Copy" is vulnerable to XSS payloads like:
 <--`<img/src=` onerror=alert(document.cookie)``> --!>
* Update or Publish the page, and you will be provided a shortcode similar to [bdotcom_bm bannerid="123"]
* You will then need to create a page that includes the Banner's shortcode above.
* Visiting the page with the banner's shortcode will trigger the XSS payload to execute,