CVE-2022-4302

High · 7.2

CVSS

7.2

EPSS

17.7%

Published

Jan 2, 2023

CISA due date

—

The record

The White Label CMS WordPress plugin before 2.5 unserializes user input provided via the settings, which could allow high-privilege users such as admin to perform PHP Object Injection when a suitable gadget is present.

Affected packages

Ecosystem	Package	Introduced	Fixed