Exploit for All-in-One Addons for Elementor - WidgetKit < 2.4.4 - Admin+ Stored XSS CVE-2022-4256

Name: Exploit for All-in-One Addons for Elementor - WidgetKit < 2.4.4 - Admin+ Stored XSS CVE-2022-4256
Rating: 5 (146 reviews)

2022-12-06 | CVSS 0.1

## https://sploitus.com/exploit?id=WPEX-ID:F5B17C68-C2B0-4D0D-BB7B-19DC30511A89
Go to WidgetKit -> API Keys, put the following payload in the fields and click Activate: "><script>alert(/xss/)</script><

The XSS will be triggered when accessing the page again