Read the docs

videousermanuals

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

videousermanuals records in CISA KEV

No videousermanuals vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
White-label-cms 2 records LOW White Label Cms 2 records HIGH

Records

2 records in White Label Cms · all components

TI-2022-03940 CVE-2022-4302 · GHSA-4mqj-332f-2459

White Label CMS < 2.5 - Admin+ PHP Object Injection

Priority HIGH 67

The White Label CMS WordPress plugin before 2.5 unserializes user input provided via the settings, which could allow high-privilege users such as admin to perform PHP Object Injection when a suitable gadget is present.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.17686 Published 2023-01-02 Fixed in 2.5
TI-2022-00346 CVE-2022-0422 · GHSA-r6cx-xcr7-w88v

White Label MS < 2.2.9 - Reflected Cross-Site Scripting

Priority LOW 38

The White Label CMS WordPress plugin before 2.2.9 does not sanitise and validate the wlcms[_login_custom_js] parameter before outputting it back in the response while previewing, leading to a Reflected Cross-Site Scripti…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.08084 Published 2022-03-07 Fixed in 2.2.9 CWE-79
Open these records in search →