medium4.8
CVE-2018-5652
An issue was discovered in the dark-mode plugin 1.6 for WordPress.
Impact
An issue was discovered in the dark-mode plugin 1.6 for WordPress. XSS exists via the wp-admin/profile.php dark_mode_end parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dark Mode Project | Dark Mode | Version 1.6 |