## https://sploitus.com/exploit?id=WPEX-ID:81E42812-93EB-480D-A2D2-5BA5E02DD0BA
As admin, put the following payload in the Setting (from plugin) > Advanced Settings (/wp-admin/admin.php?page=profile-builder-toolbox-settings) > 'Modify default Redirect Delay timer' field and save: "><script>alert(/XSS/)</script>