← CVE Intelligence

CVE-2022-4302

White Label CMS < 2.5 - Admin+ PHP Object Injection PUBLISHED

Description (CNA)

The White Label CMS WordPress plugin before 2.5 unserializes user input provided via the settings, which could allow high-privilege users such as admin to perform PHP Object Injection when a suitable gadget is present.

Affected (CNA)

Vendor / productVersions
Unknown / White Label CMSaffected 0 before 2.5

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.