Exploit for WP Duplicate Page < 1.3 - Admin+ Stored Cross Site Scripting CVE-2022-2093

Name: Exploit for WP Duplicate Page < 1.3 - Admin+ Stored Cross Site Scripting CVE-2022-2093
Rating: 5 (75 reviews)

2022-06-20 | CVSS 3.5

## https://sploitus.com/exploit?id=WPEX-ID:A11628E4-F47B-42D8-9C09-7536D49FCE4C
1. Navigate to Settings ->Duplicate Page -> Duplicate Page Settings and enter the XSS payload into
the Duplicate Page Link Text input field.
2. Click Save Changes.
3. You will observe that the payload successfully got stored into the
database and when you are triggering the same functionality at that time
JavaScript payload is executing successfully and we are getting a pop-up.
4. Payload Used: "onmouseover=alert(/XSS/)//