CVE-2018-5651

An issue was discovered in the dark-mode plugin 1.6 for WordPress. XSS exists via the wp-admin/profile.php darkmodestart parameter...

CVE-2018-5651

CVE-2018-5651 affects the WordPress dark-mode plugin (version 1.6). The issue is a Cross-Site Scripting (XSS) vulnerability reachable via the wp-admin/profile.php dark_mode_start parameter. Impact and conditions are described in multiple sources: XSS via that parameter could affect user sessions ...