## https://sploitus.com/exploit?id=WPEX-ID:7F9271F2-4DE4-4BE3-8746-2A3F149EB1D1
1. Add the following shortcode to a post:
[wordpress_file_upload redirect="true" redirectlink="javascript:alert(1)"]
2. Upload any file on the resulting post.
3. After the upload completes, you will see the XSS alert in the browser.