Exploit for Tabs Responsive < 2.2.8 - Editor+ Stored Cross-Site Scripting CVE-2022-1298

Name: Exploit for Tabs Responsive < 2.2.8 - Editor+ Stored Cross-Site Scripting CVE-2022-1298
Rating: 5 (74 reviews)

2022-05-02 | CVSS 3.5

## https://sploitus.com/exploit?id=WPEX-ID:E124D1AB-3E02-4CA5-8218-CE635E8BF074
Create/edit a Tab via the plugin, and put the following payload in a Tab description: "><img src onerror=alert(/XSS/)>

The XSS will be triggered in posts/pages where the Tab is embed via the [TABS_R id=XXXX] shortcode