Exploit for FormCraft Basic < 1.2.6 - Admin+ Stored Cross Site Scripting CVE-2022-1647

Name: Exploit for FormCraft Basic < 1.2.6 - Admin+ Stored Cross Site Scripting CVE-2022-1647
Rating: 5 (64 reviews)

2022-05-16 | CVSS 3.5

## https://sploitus.com/exploit?id=WPEX-ID:8E8F6B08-90AB-466A-9828-DCA0C0DA2C9C
Put the following payload into a Field Label and save: <img src onerror=alert(/XSS/)>

The XSS will be triggered when accessing the form again, as well as in pages/posts where the form is embed