Exploit for Namaste! LMS < 2.5.9.4 - Admin+ Stored XSS CVE-2023-0548

Name: Exploit for Namaste! LMS < 2.5.9.4 - Admin+ Stored XSS CVE-2023-0548
Rating: 5 (109 reviews)

2023-01-31 | CVSS 4.3

## https://sploitus.com/exploit?id=WPEX-ID:B6C1ED7A-5B2D-4985-847D-56586B1AAE9B
1. Go to Namaste Settings, and at Payment Settings in the Payment currency field, put: "autofocus onfocus=alert(1)//

2. Go to yourpage.com/wp-admin/admin.php?page=namaste_options, and the alert will trigger.