white-label app vulnerabilities