CVE-2022-29418

Name of the Vulnerable Software and Affected Versions Mark Daniels Night Mode plugin version 1.0.0 and earlier

Description The issue is related to an Authenticated Persistent Cross-Site Scripting (XSS) in the Mark Daniels Night Mode plugin on WordPress. This occurs via vulnerable parameters: ntmode page setting[enable-me], ntmode page setting[bg-color], ntmode page setting[txt-color], and ntmode page setting[anc color].

Recommendations For Mark Daniels Night Mode plugin version 1.0.0 and earlier, consider updating to a version that contains a fix for this issue, if available. As a temporary workaround, restrict access to the vulnerable parameters ntmode page setting[enable-me], ntmode page setting[bg-color], ntmode page setting[txt-color], and ntmode page setting[anc color] to minimize the risk of exploitation.