Videousermanuals White-Label-Cms vulnerabilities
2 known vulnerabilities affecting videousermanuals/white-label-cms.
Total CVEs
2
CISA KEV
0
Public exploits
2
Exploited in wild
0
Severity breakdown
MEDIUM1LOW1
Vulnerabilities
Page 1 of 1
CVE-2012-5387P4MEDIUMCVSS 6.8PoC≤ 1.5v1.0.2+14 more2012-10-24
CVE-2012-5387 [MEDIUM] CWE-352 CVE-2012-5387: Cross-site request forgery (CSRF) vulnerability in wlcms-plugin.php in the White Label CMS plugin be
Cross-site request forgery (CSRF) vulnerability in wlcms-plugin.php in the White Label CMS plugin before 1.5.1 for WordPress allows remote attackers to hijack the authentication of administrators for requests that modify the developer name via the wlcms_o_developer_name parameter in a save action to wp-admin/admin.php, as demonstrated by a developer n
nvd
CVE-2012-5388P4LOWCVSS 3.5PoCv1.52012-10-24
CVE-2012-5388 [LOW] CVE-2012-5388: Cross-site scripting (XSS) vulnerability in wlcms-plugin.php in the White Label CMS plugin 1.5 for W
Cross-site scripting (XSS) vulnerability in wlcms-plugin.php in the White Label CMS plugin 1.5 for WordPress allows remote authenticated administrators to inject arbitrary web script or HTML via the wlcms_o_developer_name parameter in a save action to wp-admin/admin.php, a related issue to CVE-2012-5387.
nvd