Exploit for Form Maker By 10Web < 1.14.12 - Admin+ Stored Cross-Site Scripting CVE-2022-1564

Name: Exploit for Form Maker By 10Web < 1.14.12 - Admin+ Stored Cross-Site Scripting CVE-2022-1564
Rating: 5 (72 reviews)

2022-05-09 | CVSS 3.5

## https://sploitus.com/exploit?id=WPEX-ID:A487C7E7-667C-4C92-A427-C43CC13B348D
In a form settings, put the following payload in the Actions after submission > Action Type > Custom Text: <img src onerror=alert(/XSS/)>

The XSS will be triggered after a form is submitted