CVE-2022-4302

The White Label CMS WordPress plugin before 2.5 unserializes user input provided via the settings, which could allow high-privilege users such as admin to perform PHP Object Injection when a suitable gadget is present.

Score

CVSS 3.1 7.2 High

Status

Modified - contact@wpscan.com

Published

2023-01-02

Last modified

2025-04-10

Affected products

• White Label Cms (Unknown)
• White Label Cms (Videousermanuals)

References

• https://wpscan.com/vulnerability/b7707a15-0987-4051-a8ac-7be2424bcb01