VYPR

Parsian Bank Gateway for Woocommerce

by WordPress

CVEs (1)

  • CVE-2021-39309MedDec 14, 2021
    risk 0.40cvss 6.1epss 0.01

    The Parsian Bank Gateway for Woocommerce WordPress plugin is vulnerable to Reflected Cross-Site Scripting via and parameter due to a var_dump() on $_POST variables found in the ~/vendor/dpsoft/parsian-payment/sample/rollback-payment.php file which allows attackers to inject…