## https://sploitus.com/exploit?id=WPEX-ID:E4804850-2AC2-4CEC-BC27-07ED191D96DA
1. Go to "Settings > Gtranslate"
2. Make changes to the configuration and intercept the save request
3. Replace in value of `incl_langs%5B%5D` to `</script><script>alert(1)</script>"`
4. See XSS when page is reloaded.