CVE-2024-13543

creationtimestamp| type| source ---|---|--- 2025-02-11 06:10:24+00:00| seen| https://infosec.exchange/users/cve/statuses/113983764802916706 2025-02-11 06:15:36+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhuz2gllud2h 2025-02-11 08:19:47+00:00| seen|...

CVE-2024-13543 Zarinpal Paid Downloads <= 2.3 - Reflected XSS

The Zarinpal Paid Download WordPress plugin through 2.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-13543

The CVE CVE-2024-13543 is evidenced by connected data for Zarinpal Paid Download WordPress plugin up to version 2.3, with a Reflected XSS caused by insufficient sanitization/escaping of a parameter before output. The Nuclei template explicitly notes the vulnerability in WP plugin version 2.3 and ...

CVE-2024-13543 Zarinpal Paid Downloads <= 2.3 - Reflected XSS

The Zarinpal Paid Download WordPress plugin through 2.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...