Exploit for WordPress Related Posts <= 3.6.4 - Authenticated Stored Cross-Site Scripting (XSS) CVE-2021-24211

Name: Exploit for WordPress Related Posts <= 3.6.4 - Authenticated Stored Cross-Site Scripting (XSS) CVE-2021-24211
Rating: 5 (414 reviews)

2021-03-19 | CVSS 3.5

## https://sploitus.com/exploit?id=WPEX-ID:37E0A033-3DEE-476D-AE86-68354E8F0B1C
Put the following payload in the "Related Posts Title" settings of the plugin (/wp-admin/admin.php?page=wordpress-related-posts): More from my site<script>alert(/XSS/)</script> and view a post on the blog to trigger the XSS