plugin

Parsian Bank Gateway For Woocommerce Vulnerabilities

2 known security issues reported for the Parsian Bank Gateway For Woocommerce WordPress plugin. Most recent disclosed Dec 14, 2021.

1 medium

Running Parsian Bank Gateway For Woocommerce on your site? Check whether your installed version is affected.

Scan your site free

Parsian Bank Woocommerce [parsian-bank-gateway-for-woocommerce] <= 1.0 (unfixed + closed)

unknown

[en] The Parsian Bank Gateway for Woocommerce WordPress plugin is vulnerable to Reflected Cross-Site Scripting via and parameter due to a var_dump() on $_POST variables found in the ~/vendor/dpsoft/parsian-payment/sample/rollback-payment.php file which allows attackers to inject arbitrary web scripts, in versions up to...

Affected:
up to 1.0
Fix:
No patched version reported
Disclosed:
Dec 14, 2021

CVE-2021-39309 on NVD →

Parsian Bank Gateway for Woocommerce <= 1.0 - Reflected Cross-Site Scripting

medium

The Parsian Bank Gateway for Woocommerce WordPress plugin is vulnerable to Reflected Cross-Site Scripting via and parameter due to a var_dump() on $_POST variables found in the ~/vendor/dpsoft/parsian-payment/sample/rollback-payment.php file which allows attackers to inject arbitrary web scripts, in versions up to and...

CVSS:
6.1
Affected:
up to 1.0
Fix:
No patched version reported
Disclosed:
Dec 13, 2021

CVE-2021-39309 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database