## https://sploitus.com/exploit?id=WPEX-ID:78054BD7-CDC2-4B14-9B5C-30F10E802D6B Put the following payload in the Youtube API Key settings and save: test"><script>alert(/XSS/)</script>. The XSS will be triggered when viewing the settings page again