Description
Craft is a platform for creating digital experiences. When you insert a payload inside a label name or instruction of an entry type, an cross-site scripting (XSS) happens in the quick post widget on the admin dashboard. This issue has been fixed in version 4.3.7.
Remediation
References
Related Vulnerabilities
WordPress Plugin Easy Gallery Slideshow Cross-Site Scripting (1.1)
WordPress 4.5.x Denial of Service Vulnerability (4.5 - 4.5.13)
Oracle Database Server CVE-2008-0346 Vulnerability (CVE-2008-0346)
Dotclear Other Vulnerability (CVE-2007-1989)
Oracle HTTP Server CVE-2019-2414 Vulnerability (CVE-2019-2414)