Exploit for Easy Forms for MailChimp < 6.8.9 - Admin+ Stored XSS CVE-2023-1323

Name: Exploit for Easy Forms for MailChimp < 6.8.9 - Admin+ Stored XSS CVE-2023-1323
Rating: 5 (49 reviews)

2023-03-09 | CVSS 4.3

## https://sploitus.com/exploit?id=WPEX-ID:D3A2AF00-719C-4B86-8877-B1D68A589192
Edit a form and put the following payload in the Form Name: "><script>alert(/XSS/)</script>

The XSS will be triggered when viewing the form list (/wp-admin/admin.php?page=yikes-inc-easy-mailchimp) (<= 6.8.8), as well on page/post where the form is embed (via the shortcode) (< 6.8.7)