I will give you a description of vulnerability. You should extract vulnerable functions. Write the output in following format: 
FUNCS function1, function2, ...
If you found no functions, output "NONE". Print only funcitons mentioned in description. Ignore URLs.

Here is the description:
Authenticated (admin user role) Persistent Cross-Site Scripting (XSS) in NAME_1 plugin <= 1.0.0 on WordPress via vulnerable parameters: &ntmode_page_setting[enable-me], &ntmode_page_setting[bg-color], &ntmode_page_setting[txt-color], &ntmode_page_setting[anc_color].
 In your response, include at most 5 words that are fully capitalized to emphasize key points.
user