Share
## https://sploitus.com/exploit?id=WPEX-ID:7101CE04-670E-4CE0-9F60-E00494FF379D
Create/edit a dashboard with an HTML widget in it and put the following payload in the Title or Description fields: <svg/onload=alert(/XSS/)>

The XSS will be triggered when viewing the Dashboard page (/wp-admin/admin.php?page=fast-flow)