Authenticated (admin user role) Persistent Cross-Site Scripting (XSS) in Mark Daniels Night Mode plugin <= 1.0.0 on WordPress via vulnerable parameters: &ntmode_page_settingenable-me &ntmode_page_settingbg-color &ntmode_page_settingtxt-color &ntmode_page_settinganc_color.