WordPress Plugin Vulnerabilities
Night Mode < 1.4.0 - Admin+ Stored Cross-Site Scripting
Description
The plugin does not sanitise and escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks woven when unfiltered_html is disallowed
Affects Plugins
Fixed in 1.4.0 References
CVE
Classification
Type
XSS
OWASP top 10
CWE
CVSS
Miscellaneous
Original Researcher
Ex.Mi
Verified
No
WPVDB ID
Timeline
Publicly Published
2022-04-25 (about 4 years ago)
Added
2022-04-25 (about 4 years ago)
Last Updated
2022-04-27 (about 4 years ago)
WPScan 