Share
## https://sploitus.com/exploit?id=WPEX-ID:E6CF694D-C4AE-4B91-97C0-A6BDBAFC7D60
Put the following payload in the Plugin's Settings > General > "Error message for wrong login credentials", Lessons > "Lesson Permalink Base" and "Youtube API Key", E-Mail Notification > "Name" and "Email Address" fields: "><script>alert(/XSS/)</script>

Save the Settings and refresh them to trigger the XSS