## https://sploitus.com/exploit?id=WPEX-ID:762FF2CA-5C1F-49AE-B83C-1C22BACBC82F
In the "My Data" section of the plugin settings, enter the payload `<svg/onload=alert('xss1')>` for either the "text of personal data usage Terms" or "text of Terms of donation service" settings . Set at least one payment method, load the campaign, and view the XSS.