Exploit for Carousel CK <= 1.1.0 - Admin+ Stored Cross-Site Scripting CVE-2022-1336

Name: Exploit for Carousel CK <= 1.1.0 - Admin+ Stored Cross-Site Scripting CVE-2022-1336
Rating: 5 (58 reviews)

2022-05-18 | CVSS 3.5

## https://sploitus.com/exploit?id=WPEX-ID:39E127F1-C36E-4699-892F-3755EE17BAB6
Create/edit a Carousel, add a Slide and put the following payload in the Description <img src onerror=alert(/XSS/)>

The XSS will be triggered in page/post where the Carousel is embed