## https://sploitus.com/exploit?id=WPEX-ID:B2BAC900-3D8F-406C-B03D-C8DB156ACC59
1. Create/edit a team and add a member to it
2. Fill all the forms, upload a photo and input `" onmouseover='alert(1)'` in the "First name ", "Lastname" or "Link URL" field.
3. Put the resulting shortcode in a post, render the post and hover the user card / social link icon to trigger the XSS