Exploit for Html5 Audio Player < 2.1.3 - Contributor+ Stored Cross-Site Scripting CVE-2021-24412

Name: Exploit for Html5 Audio Player < 2.1.3 - Contributor+ Stored Cross-Site Scripting CVE-2021-24412
Rating: 5 (215 reviews)

2021-09-20 | CVSS 3.5

## https://sploitus.com/exploit?id=WPEX-ID:C4ED3E52-CBE0-46DC-AB43-65DE78CFB225
Log in as contributor and add the following shortcode in a page (there is no need to have an existing Audio Player): [player id="=0; alert(/XSS/);x"]

Then view the post to trigger the XSS