CVE-2022-29418

Authenticated (admin user role) Persistent Cross-Site Scripting (XSS) in Mark Daniels Night Mode plugin <= 1.0.0 on WordPress via vulnerable parameters: &ntmode_page_setting[enable-me], &ntmode_page_setting[bg-color], &ntmode_page_setting[txt-color], &ntmode_page_setting[anc_color].
Configurations

Configuration 1 (hide)

cpe:2.3:a:night_mode_project:night_mode:*:*:*:*:*:wordpress:*:*

History

No history.

Information

Published : 2022-04-25 17:15

Updated : 2024-11-21 06:59


NVD link : CVE-2022-29418

Mitre link : CVE-2022-29418

CVE.ORG link : CVE-2022-29418


JSON object : View

Products Affected

night_mode_project

  • night_mode
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')