Exploit for WP Staging (Free < 3.4.0, Pro < 5.4.0) - Admin+ Stored XSS CVE-2024-2309

Name: Exploit for WP Staging (Free < 3.4.0, Pro < 5.4.0) - Admin+ Stored XSS CVE-2024-2309
Rating: 5 (54 reviews)

2024-03-27 | CVSS 5.7

## https://sploitus.com/exploit?id=WPEX-ID:A4152818-1E07-46A7-AEC4-70F1A1B579A6
1. Go to "WP Staging > Backup & Migration"
2. Edit an existing backup's "Backup Name" field, setting it to: `123123" onmouseover='alert(1)'`
3. Save and see the XSS when reopening the edit screen