CVE-2026-96836

Unauthenticated Cross Site Scripting XSS in Parsi Date = 6.3 versions...

CVE-2026-96836 WordPress Parsi Date plugin <= 6.3 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Parsi Date = 6.3 versions...

EUVD-2026-89888

Unauthenticated Cross Site Scripting XSS in Parsi Date = 6.3 versions...

CVE-2026-96836 WordPress Parsi Date plugin <= 6.3 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Parsi Date = 6.3 versions...

CVE-2026-96836

The Parsi Date WordPress plugin versions

PT-2026-103220

Unauthenticated Cross Site Scripting XSS in Parsi Date = 6.3 versions...

CVE-2026-96836: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Parsi Date = 6.3 versions...

WordPress Parsi Date plugin <= 6.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by neurotx in WordPress Plugin Parsi Date versions = 6.3...

EUVD-2024-33732

Malicious code in bioql PyPI...

Malicious code in @zalastax/nolb-parsi (npm)

The package @zalastax/nolb-parsi was found to contain malicious code...

MAL-2025-13010 Malicious code in @zalastax/nolb-parsi (npm)

The package @zalastax/nolb-parsi was found to contain malicious code...

CVE-2024-11032

The Parsi Date plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 5.1.1. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that...

CVE-2024-11032

The Parsi Date plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 5.1.1. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that...

CVE-2024-11032 Parsi Date <= 5.1.1 - Reflected Cross-Site Scripting via add_query_arg Parameter

The Parsi Date plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 5.1.1. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that...

CVE-2024-11032 Parsi Date <= 5.1.1 - Reflected Cross-Site Scripting via add_query_arg Parameter

The Parsi Date plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 5.1.1. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that...

CVE-2024-11032

CVE-2024-11032 : The Parsi Date WordPress plugin (versions ≤ 5.1.1) is vulnerable to a Reflected Cross-Site Scripting flaw caused by using add_query_arg without proper URL escaping. This allows unauthenticated attackers to inject arbitrary scripts into pages that run when a user is tricked into p...

CVE-2024-11032: Improper Neutralization of Input During Web Page Generation

The Parsi Date plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 5.1.1. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that...

PT-2024-16718 · WordPress · Parsi Date

Name of the Vulnerable Software and Affected Versions: Parsi Date plugin for WordPress versions up to, and including, 5.1.1 Description: The issue arises from the use of add query arg without proper escaping on the URL, allowing unauthenticated attackers to inject arbitrary web scripts in pages...

WordPress plugin Parsi Date has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress Parsi Date plugin <= 5.1.1 - Reflected Cross-Site Scripting via add_query_arg Parameter vulnerability

Reflected Cross-Site Scripting via addqueryarg Parameter vulnerability discovered by vgo0 in WordPress Plugin Parsi Date versions = 5.1.1...