Seo By 10Web < 1.2.7 - Admin+ Stored XSS

The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).

1. Go to SEO by 10Web » Sitemap section.

2. And new URL to the page.

3. Add XSS payload: "><audio src=x onerror=confirm("XSS")>

4. Save to trigger the XSS.