Exploit for Easy Contact Form Pro < 1.1.1.9 - Authenticated Stored Cross-Site Scripting (XSS)

Name: Exploit for Easy Contact Form Pro < 1.1.1.9 - Authenticated Stored Cross-Site Scripting (XSS)
Rating: 5 (65 reviews)

2021-01-15 | CVSS -0.1

## https://sploitus.com/exploit?id=WPEX-ID:BFAA7D79-904E-45F1-BC42-DDD90A65CE74
As an author, editor or admin, create/edit a form and add the following payload in the 'Email Subject" field "><svg/onload=alert(/XSS/)>