Exploit for Birthdays Widget <= 1.7.18 - Admin+ Stored Cross Site Scripting CVE-2022-1643

Name: Exploit for Birthdays Widget <= 1.7.18 - Admin+ Stored Cross Site Scripting CVE-2022-1643
Rating: 5 (50 reviews)

2022-05-09 | CVSS 3.5

## https://sploitus.com/exploit?id=WPEX-ID:73111C7E-C772-4BED-B282-854C1AE57444
As admin, create/edit a Birthday and add the following payload in the Name field: <script>alert(/XSS/)</script>