Exploit for Coming Soon, Under Construction & Maintenance Mode By Dazzler < 1.6.7 - Admin+ Stored Cross-Site Scripting CVE-2021-24539

Name: Exploit for Coming Soon, Under Construction & Maintenance Mode By Dazzler < 1.6.7 - Admin+ Stored Cross-Site Scripting CVE-2021-24539
Rating: 5 (257 reviews)

2021-10-04 | CVSS 2.1

## https://sploitus.com/exploit?id=WPEX-ID:4BDA5DFF-F577-4CD8-A225-C6B4C32F22B4
Via the plugin's settings:
- Enable the 'Coming Soon Mode'
- Put the following payload in the Description field <svg onload=alert(/XSS/)>

Then access the frontend as a user to trigger the XSS