CVE-2024-43303

The White Label CMS plugin through version 2.7.4 is susceptible to reflected cross-site scripting attacks because user inputs are not properly sanitized and outputs lack adequate escaping. An unauthenticated attacker could inject malicious scripts into pages that would execute in a victim's browser if the victim were persuaded to click a malicious link. The vulnerability was resolved in version 2.7.5.

Based on public CVE data (MITRE/NVD).