Exploit for WP-EMail < 2.69.1 - Admin+ Stored Cross-Site Scripting CVE-2023-3721

Name: Exploit for WP-EMail < 2.69.1 - Admin+ Stored Cross-Site Scripting CVE-2023-3721
Rating: 5 (94 reviews)

2023-07-24 | CVSS 4.3

## https://sploitus.com/exploit?id=WPEX-ID:3F90347A-6586-4648-9F2C-D4F321BF801A
1. In the "Email Options" section of the plugin enter the payload `" style=animation-name:rotation onanimationstart=alert(/XSS/)//` for the "E-Mail Text Link For Post" and save.
2. Reload the page and see the XSS.