Share
## https://sploitus.com/exploit?id=WPEX-ID:ECF6A082-B563-42C4-9D8C-3757AA6B696F
Put the following payload in the Quiz Url Slug setting: "><script>alert(/XSS/)</script>

Create a quiz and publish it. The XSS will be triggered when editing the Quizz (ie wp-admin/admin.php?page=mlw_quiz_options&quiz_id=4), or accessing the Quizzes/Surveys page (/wp-admin/admin.php?page=mlw_quiz_list)