## https://sploitus.com/exploit?id=WPEX-ID:4385370E-CF99-4249-B2C1-90CBFA8378A4
Put the following payload in the "Currency Symbol" settings of the plugin and save: "><svg/onload=prompt(/XSS/)>
Other settings are affected (such as Minimum Payout Amount, Email Name etc)