Exploit for Float menu < 5.0.3 - Admin+ Stored Cross-Site Scripting CVE-2023-3225

Name: Exploit for Float menu < 5.0.3 - Admin+ Stored Cross-Site Scripting CVE-2023-3225
Rating: 5 (84 reviews)

2023-06-19 | CVSS 4.3

## https://sploitus.com/exploit?id=WPEX-ID:3C76D0F4-2EA8-433D-AFB2-E35E45630899
1. Add a new item in the plugin settings 
2. Enter the payload `javascript:alert(/XSS/);` in the "Link" field 
3. Go to the homepage, and click on the generated link to trigger the XSS