## https://sploitus.com/exploit?id=WPEX-ID:D084C5B1-45F1-4E7E-B3E9-3C98AE4BCE9C
Create a new category via the plugin (/wp-admin/admin.php?page=owaccategory), add the following payload in the Name field: <script>alert(/XSS/)</script>, then view a page/post where the associated Category Shortcode is embed