WordPress Parsian Bank Gateway for Woocommerce plugin cross-site scripting vulnerability

WordPress is the Wordpress Foundation’s set of blogging platform developed using the PHP language. The platform supports the hosting of personal blog sites on PHP and MySQL servers. Parsian Bank Gateway for Woocommerce plugin is a WordPress open source application plugin. WordPress Parsian Bank Gateway for Woocommerce plugin exists security vulnerability, which originates from ~/vendor/dpsoft/parsian-payment/sample/rollback-payment.php lacks a data validation filter for user-supplied data and output. An attacker could exploit this vulnerability to execute JavaScript code on the client side.