Videousermanuals White Label Cms vulnerabilities

CVE-2022-0422 [MEDIUM] CWE-79 CVE-2022-0422: The White Label CMS WordPress plugin before 2.2.9 does not sanitise and validate the wlcms[_login_cu The White Label CMS WordPress plugin before 2.2.9 does not sanitise and validate the wlcms[_login_custom_js] parameter before outputting it back in the response while previewing, leading to a Reflected Cross-Site Scripting issue

CVE-2022-4302 [HIGH] CWE-502 CVE-2022-4302: The White Label CMS WordPress plugin before 2.5 unserializes user input provided via the settings, w The White Label CMS WordPress plugin before 2.5 unserializes user input provided via the settings, which could allow high-privilege users such as admin to perform PHP Object Injection when a suitable gadget is present.

CVE-2024-4280 [MEDIUM] CWE-862 CVE-2024-4280: The White Label CMS plugin for WordPress is vulnerable to unauthorized modification of data due to a The White Label CMS plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the reset_plugin function in all versions up to, and including, 2.7.3. This makes it possible for unauthenticated attackers to reset plugin settings.