WordPress Dark Mode Cross-Site Script Vulnerability

WordPress Dark Mode 5.3.17 and earlier versions have a cross-site scripting vulnerability. This vulnerability stems from improper input cleaning and insufficient output escaping through the 'icon-light' short-code attribute, which may lead to storage-based cross-site scripting attacks...