Description
Craft is a platform for creating digital experiences. When you insert a payload inside a label name or instruction of an entry type, an cross-site scripting (XSS) happens in the quick post widget on the admin dashboard. This issue has been fixed in version 4.3.7.
Remediation
References
Related Vulnerabilities
WordPress Plugin Login No Captcha reCAPTCHA Security Bypass (1.4.1)
WordPress Plugin WordPress OpenID Connect Client Cross-Site Scripting (2.1.4)
Oracle Application Server Other Vulnerability (CVE-2006-5354)
WordPress Plugin LearnPress-WordPress LMS Multiple Cross-Site Scripting Vulnerabilities (4.1.3)
WordPress Plugin CM Table Of Contents Cross-Site Scripting (1.0.7)