CVE-2024-11032

🗓️ 26 Nov 2024 09:32:35Reported by WordfenceType

The Parsi Date plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 5.1.1. Unauthenticated attackers can inject arbitrary web scripts in pages by tricking a user into performing an action such as clicking on a link

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2024-11032	26 Nov 202409:34	–	circl
CNNVD	WordPress plugin Parsi Date 跨站脚本漏洞	26 Nov 202400:00	–	cnnvd
Cvelist	CVE-2024-11032 Parsi Date <= 5.1.1 - Reflected Cross-Site Scripting via add_query_arg Parameter	26 Nov 202409:32	–	cvelist
EUVD	EUVD-2024-33732	3 Oct 202520:07	–	euvd
NVD	CVE-2024-11032	26 Nov 202410:15	–	nvd
Patchstack	WordPress Parsi Date Plugin <= 5.1.1 is vulnerable to Cross Site Scripting (XSS)	25 Nov 202400:00	–	patchstack
Patchstack	WordPress Parsi Date plugin <= 5.1.1 - Reflected Cross-Site Scripting via add_query_arg Parameter vulnerability	25 Nov 202421:51	–	patchstack
Positive Technologies	PT-2024-16718 · WordPress · Parsi Date	26 Nov 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-11032	23 May 202507:06	–	redhatcve
Vulnrichment	CVE-2024-11032 Parsi Date <= 5.1.1 - Reflected Cross-Site Scripting via add_query_arg Parameter	26 Nov 202409:32	–	vulnrichment

Vulners

Node

man4toman parsi_dateRange≤5.1.1wordpress

[
  {
    "vendor": "man4toman",
    "product": "پارسی دیت – Parsi Date",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "5.1.1",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
wordpress	www.wordpress.org/plugins/wp-parsidate/
plugins	www.plugins.trac.wordpress.org/changeset/3195986/wp-parsidate/trunk/includes/general.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/72383bd3-82b4-4aea-9a1c-277ad06e2500
plugins	www.plugins.trac.wordpress.org/browser/wp-parsidate/tags/5.1.1/includes/general.php

15 Apr 2026 00:35Current

6Medium risk

Vulners AI Score6

CVSS 3.16.1

EPSS0.01411

SSVC

CWE-79