CVE-2022-29418

Authenticated (admin user role) Persistent Cross-Site Scripting (XSS) in Mark Daniels Night Mode plugin <= 1.0.0 on WordPress via vulnerable parameters: &ntmode_page_setting[enable-me], &ntmode_page_setting[bg-color], &ntmode_page_setting[txt-color], &ntmode_page_setting[anc_color].
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:night_mode_project:night_mode:*:*:*:*:*:wordpress:*:*

Information

Published : 2022-04-25 10:15

Updated : 2022-05-05 11:30


NVD link : CVE-2022-29418

Mitre link : CVE-2022-29418


JSON object : View

CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Advertisement

dedicated server usa

Products Affected

night_mode_project

  • night_mode