CVE-2018-5651

CVE-2018-5651 affects the WordPress dark-mode plugin (version 1.6). The issue is a Cross-Site Scripting (XSS) vulnerability reachable via the wp-admin/profile.php dark_mode_start parameter. Impact and conditions are described in multiple sources: XSS via that parameter could affect user sessions ...