Dark Mode <= 1.6 - Stored XSS
Affects Plugin
|
fixed in version 1.7
|
References
| CVE | 2018-5651 |
| CVE | 2018-5652 |
| URL | https://github.com/d4wner/Vulnerabilities-Report/blob/master/dark-mode.md |
| URL | https://plugins.trac.wordpress.org/changeset/1802288/dark-mode |
Classification
| Type | XSS |
| OWASP Top 10 | A7: Cross-Site Scripting (XSS) |
| CWE | CWE-79 |
Miscellaneous
| Submitter | ethicalhack3r |
| Submitter Website | https://dewhurstsecurity.com/ |
| Submitter Twitter | ethicalhack3r |
| Views | 5486 |
| Verified | No |
| WPVDB ID | 9008 |
Timeline
| Publicly Published | 2018-01-12 (almost 2 years ago) |
| Added | 2018-01-22 (over 1 year ago) |
| Last Updated | 2018-01-22 (over 1 year ago) |
Our Other Services
| Online WordPress Vulnerability Scanner | WPScan WordPress Security Plugin |
