Exploit for Cookie Bar <= 1.8.8 - Admin+ Stored Cross-Site Scripting CVE-2021-24653

Name: Exploit for Cookie Bar <= 1.8.8 - Admin+ Stored Cross-Site Scripting CVE-2021-24653
Rating: 5 (96 reviews)

2021-09-22 | CVSS 3.5

## https://sploitus.com/exploit?id=WPEX-ID:BFA8F46F-D323-4A2D-B875-39CD9B4CEE0A
Add the following payload in the "Cookie Bar Message" setting of the plugin (/wp-admin/options-general.php?page=cookie-bar-settings): <img src onerror=alert(/XSS/)>

Then access the frontend (with any user/unauthenticated user) to trigger the XSS