Exploit for WP Social Sharing <= 2.2 - Admin+ Stored XSS CVE-2022-4198

Name: Exploit for WP Social Sharing <= 2.2 - Admin+ Stored XSS CVE-2022-4198
Rating: 5 (148 reviews)

2022-12-07 | CVSS -0.0

## https://sploitus.com/exploit?id=WPEX-ID:BA372400-96F7-45A9-9E89-5984ECC4D1E2
1. Go to Settings » WP Social Sharing page of the plugin, enter the following payload into the input box named 'Default share image': x" onerror="alert(/XSS/)"

2. Click 'Save Changes' and refresh the page to see the XSS popup.