## https://sploitus.com/exploit?id=WPEX-ID:BFB174D4-7658-4883-A682-D06BDA89EC44 1. Go to "Contact > Google Place API" 2. Add the payload `"><script>alert(1)</script>` 3. Save the changes and reload the page to see the XSS