Share
## https://sploitus.com/exploit?id=WPEX-ID:A3CA2ED4-11EA-4D78-AA4C-4ED58F258932
An an admin
- Create/edit a form and put the following payload in the Form name field: "><script>alert(/XSS-form-name/)</script>
- Edit a Shared Field and put the following payload in the Field Label: "><script>alert(/XSS-field-label/)</script>

Then edit the form again to trigger the XSS via Form Name, click on the shared field to trigger XSS via Field Label