White Label CMS vulnerable to Reflected XSS

CVE-2024-43303

Summary

The vulnerability in White Label CMS allows for reflected Cross-Site Scripting (XSS) attacks due to improper neutralization of user input during the dynamic generation of web pages. This security flaw affects multiple versions of the CMS, posing risks to web applications that rely on this platform. Attackers can exploit this vulnerability to inject malicious scripts, leading to unauthorized actions being taken in the context of a user session, which could compromise user data and security.

References