Exploit for tagDiv Composer < 4.2 - Admin+ Stored XSS CVE-2023-3170

Name: Exploit for tagDiv Composer < 4.2 - Admin+ Stored XSS CVE-2023-3170
Rating: 5 (77 reviews)

2023-08-17 | CVSS 4.3

## https://sploitus.com/exploit?id=WPEX-ID:E95FF3C6-283B-4E5E-BEA0-1F1375DA08DA
1. Visit Newsmag > Plugins and install and activate "tagDiv Composer"
2. Visit Newsmag > Theme panel > Custom Code
3. Enter the following in "Custom CSS" and click "Save Settings":

</style><img src onerror=alert('XSS')><style>

4. Visit the site frontend to see the XSS.