Exploit for Gianism <= 5.1.0 - Admin+ Stored XSS CVE-2024-3921

Name: Exploit for Gianism <= 5.1.0 - Admin+ Stored XSS CVE-2024-3921
Rating: 5 (25 reviews)

2024-05-08 | CVSS 5.7

## https://sploitus.com/exploit?id=WPEX-ID:3C114E14-9113-411D-91F3-2E2DAEB40739
1. Go to https://example.com/wp-admin/options-general.php?page=gianism&view=setting
2. In the "URL Prefix" field, enter the payload `<img src=xss onerror=alert(1)>`
3. Save and see the XSS