Exploit for Appointment booking addon for Gravity Forms <= 1.9.5.1 - Admin+ Stored XSS CVE-2023-2707

Name: Exploit for Appointment booking addon for Gravity Forms <= 1.9.5.1 - Admin+ Stored XSS CVE-2023-2707
Rating: 5 (64 reviews)

2023-10-31 | CVSS 4.3

## https://sploitus.com/exploit?id=WPEX-ID:E5664DA4-5B78-4E42-BE6B-E0D7B73A85B0
The "Translations" settings of the plugin are vulnerable to XSS using the payload: `"/><img src=x onerror=alert(/XSS/)>`
Entering it for any value and reloading the page will result in the XSS.