Exploit for 404 to Start <= 1.6.1 - Admin+ Stored XSS CVE-2022-3855

Name: Exploit for 404 to Start <= 1.6.1 - Admin+ Stored XSS CVE-2022-3855
Rating: 5 (43 reviews)

2022-12-15 | CVSS 0.2

## https://sploitus.com/exploit?id=WPEX-ID:AE44F2D8-A452-4310-B616-54D9519867EB
1. In the settings of the plugin, enter the following value in all the input boxes. The value is: 1" onmouseenter="alert(/XSS/)".

2. Click the 'Save Changes' button on the page.

3. Refresh or re-enter the page and move the mouse over the input box to get the XSS trigger.