Description
The White Label CMS WordPress plugin before 2.5 unserializes user input provided via the settings, which could allow high-privilege users such as admin to perform PHP Object Injection when a suitable gadget is present.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | White Label CMS | < 2.5 | 2.5 |
References
- https://wpscan.com/vulnerability/b7707a15-0987-4051-a8ac-7be2424bcb01 exploit vdb-entry technical-description