PT-2022-19591
CVE-2022-29418
·
تاريخ النشر
2022-04-25
·
تاريخ التحديث
2022-05-05
الوصف من
CVSS 3.1
4.8
متوسطةالمقاييسAV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Mark Daniels Night Mode plugin version 1.0.0 and earlier
Description
The issue is related to an Authenticated Persistent Cross-Site Scripting (XSS) in the Mark Daniels Night Mode plugin on WordPress. This occurs via vulnerable parameters:
ntmode page setting[enable-me], ntmode page setting[bg-color], ntmode page setting[txt-color], and ntmode page setting[anc color].Recommendations
For Mark Daniels Night Mode plugin version 1.0.0 and earlier, consider updating to a version that contains a fix for this issue, if available. As a temporary workaround, restrict access to the vulnerable parameters
ntmode page setting[enable-me], ntmode page setting[bg-color], ntmode page setting[txt-color], and ntmode page setting[anc color] to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾