Exploit for WP Config File Editor <= 1.7.1 - Authenticated Stored Cross-Site Scripting (XSS) CVE-2021-24367

Name: Exploit for WP Config File Editor <= 1.7.1 - Authenticated Stored Cross-Site Scripting (XSS) CVE-2021-24367
Rating: 5 (76 reviews)

2021-05-31 | CVSS 3.5

## https://sploitus.com/exploit?id=WPEX-ID:F35B7C8F-CFB6-42B6-8A3A-8C07CD1E9DA0
Go to Tools->Profile->Create and enter a JavaScript payload in the Name parameter.

Specifically, the profileForm[name] parameter of the wcfe-services-profiles-services-profiles-ajaxview POST action.