Description
Craft is a platform for creating digital experiences. When you insert a payload inside a label name or instruction of an entry type, an cross-site scripting (XSS) happens in the quick post widget on the admin dashboard. This issue has been fixed in version 4.3.7.
Remediation
References
Related Vulnerabilities
WordPress Plugin Import all XML, CSV & TXT into WordPress Multiple Vulnerabilities (6.5.7)
WordPress Plugin MATRIX 3D Cross-Site Scripting (1.2)
WordPress Plugin Xhanch-My Twitter Cross-Site Request Forgery (2.7.6)
PHP Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2018-19520)