WordPress White Label CMS <2.2.9 - Cross-Site Scripting
WordPress White Label CMS plugin before 2.2.9 contains a reflected cross-site scripting vulnerability. It does not sanitize and validate the wlcms[_login_custom_js] parameter before outputting it back in the response while previewing.
white_label_cmsPoC 已收录
CVSS6.1EPSS 11.3%