Lucene search
+L

14 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 10:45 a.m.13 views

CVE-2022-0643

The Bank Mellat WordPress plugin through 1.3.7 does not sanitize and escape the orderId parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...

6.1CVSS6.5AI score0.008EPSS
SaveExploits2References1
EUVD
EUVD
added 2025/10/03 8:07 p.m.8 views

EUVD-2022-15737

Malicious code in bioql PyPI...

6.1CVSS6.3AI score0.008EPSS
SaveExploits2References1
Packet Storm
Packet Storm
added 2023/07/21 12:00 a.m.251 views

CMS-Bank Mellat Payment Manager 1.0.0 Cross Site Scripting

==================================================================================================================================== | Title : CMS-Bank Mellat Payment Manager v1.0.0 Xss Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox...

7.1AI score
SaveExploits0
CNVD
CNVD
added 2022/03/30 12:00 a.m.40 views

WordPress Bank Mellat plugin cross-site scripting vulnerability

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. WordPress plugin is a WordPress open source application plugin. WordPress Bank Mellat plugin 1.3.7 and earlier versions have a cross-site scripting vulnerability that stems from a failure to clean a...

6.1CVSS1.1AI score0.008EPSS
SaveExploits2References1
OSV
OSV
added 2022/03/28 6:15 p.m.7 views

CVE-2022-0643

The Bank Mellat WordPress plugin through 1.3.7 does not sanitize and escape the orderId parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...

6.1CVSS6.4AI score0.008EPSS
SaveExploits2References1
ATTACKERKB
ATTACKERKB
added 2022/03/28 6:15 p.m.7 views

CVE-2022-0643

The Bank Mellat WordPress plugin through 1.3.7 does not sanitize and escape the orderId parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...

6.1CVSS6.3AI score0.008EPSS
SaveExploits2References2
NVD
NVD
added 2022/03/28 6:15 p.m.24 views

CVE-2022-0643

The Bank Mellat WordPress plugin through 1.3.7 does not sanitize and escape the orderId parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...

6.1CVSS0.008EPSS
SaveExploits2References1
Prion
Prion
added 2022/03/28 6:15 p.m.25 views

Cross site scripting

The Bank Mellat WordPress plugin through 1.3.7 does not sanitize and escape the orderId parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...

4.3CVSS6.2AI score0.008EPSS
SaveExploits2References1Affected Software1
CVE
CVE
added 2022/03/28 5:23 p.m.95 views

CVE-2022-0643

The Bank Mellat WordPress plugin (versions

6.1CVSS6.1AI score0.008EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
added 2022/03/28 5:23 p.m.33 views

CVE-2022-0643 Bank Mellat <= 1.3.7 - Reflected Cross-Site Scripting

The Bank Mellat WordPress plugin through 1.3.7 does not sanitize and escape the orderId parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...

6.4AI score0.008EPSS
SaveExploits2References1
CNNVD
CNNVD
added 2022/03/28 12:00 a.m.8 views

WordPress plugin Bank Mellat 跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. WordPress plugin is a WordPress open source application plugin. WordPress Bank Mellat plugin 1.3.7 and earlier versions have a cross-site scripting vulnerability that stems from a failure to clean a...

6.1CVSS4.9AI score0.008EPSS
SaveExploits2References2
WPVulnDB
WPVulnDB
added 2022/03/01 12:00 a.m.29 views

Bank Mellat <= 1.3.7 - Reflected Cross-Site Scripting

The plugin does not sanitize and escape the orderId parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting. PoC https://example.com/wp-admin/admin.php?page=bank-mellat="...

6.1CVSS0.3AI score0.008EPSS
SaveExploits2Affected Software1
wpexploit
wpexploit
added 2022/03/01 12:00 a.m.149 views

Bank Mellat <= 1.3.7 - Reflected Cross-Site Scripting

The plugin does not sanitize and escape the orderId parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting. https://example.com/wp-admin/admin.php?page=bank-mellat&orderId="...

6.1CVSS0.8AI score0.008EPSS
SaveExploits2
Patchstack
Patchstack
added 2022/03/01 12:00 a.m.42 views

WordPress Bank Mellat plugin <= 1.3.7 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by Ran Crane in WordPress Bank Mellat plugin versions = 1.3.7. Solution Deactivate and delete. This plugin has been closed as of February 16, 2022 and is not available for download. This closure is temporary, pending a full review...

6.1CVSS3.1AI score0.008EPSS
SaveExploits2References3Affected Software1
Rows per page
Query Builder