WordPress White Label CMS <2.2.9 - Cross-Site Scripting Detection

WordPress White Label CMS plugin before 2.2.9 contains a reflected cross-site scripting vulnerability. It does not sanitize and validate the wlcmslogincustomjs parameter before outputting it back in the response while previewing. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress White Label...

WordPress White Label CMS Plugin <= 2.7.4 is vulnerable to Cross Site Scripting (XSS)

Software White Label CMS Type Plugin Vulnerable versions = 2.7.4 Fixed in 2.7.5 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-43303 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID c731ad649acb Credits Rafie Muhammad Patchstack Requir...