CVE-2022-4302: Undefined Security Weakness

The White Label CMS WordPress plugin before 2.5 unserializes user input provided via the settings, which could allow high-privilege users such as admin to perform PHP Object Injection when a suitable gadget is present...

PT-2022-13171

Name of the Vulnerable Software and Affected Versions White Label CMS WordPress plugin versions prior to 2.2.9 Description The issue is related to a Reflected Cross-Site Scripting problem. It occurs because the wlcms login custom js parameter is not properly sanitised and validated before being...

CVE-2022-0422: Improper Neutralization of Input During Web Page Generation

The White Label CMS WordPress plugin before 2.2.9 does not sanitise and validate the wlcmslogincustomjs parameter before outputting it back in the response while previewing, leading to a Reflected Cross-Site Scripting issue...