Share
## https://sploitus.com/exploit?id=WPEX-ID:FC091BBD-7338-4BD4-ADD5-E46502A9A949
1. As a Contributor, navigate to "Add new position"
2. On the page to create a post, in the "Working Hours" add: `<img src=x onerror=alert(1)>`
3. When a higher level user publishes or previews the page, the XSS alert is shown.