Skip to content
Sign in
5.4 Medium

CVE-2022-4714 The WP Dark Mode WordPress plugin before 4.0.0 does not validate and escape one of its shortcode attributes, which could…

Description

The WP Dark Mode WordPress plugin before 4.0.0 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack

Affected products and versions

Product Affected versions Fixed in
WP Dark Mode 4.0 earliest → < 4.0.0 4.0.0

Other CVEs of WP Dark Mode

The 2 CVEs of WP Dark Mode →
CVE-2023-0467 The WP Dark Mode WordPress plugin before 4.0.8 does not properly sanitize the style parameter in shortcodes before using… 4.3 Medium
Track this CVE