CVE-2021-39309: Improper Neutralization of Input During Web Page Generation

The Parsian Bank Gateway for Woocommerce WordPress plugin is vulnerable to Reflected Cross-Site Scripting via and parameter due to a vardump on $POST variables found in the /vendor/dpsoft/parsian-payment/sample/rollback-payment.php file which allows attackers to inject arbitrary web scripts, in...

PT-2021-22517

Name of the Vulnerable Software and Affected Versions: Parsian Bank Gateway for Woocommerce WordPress plugin versions up to and including 1.0 Description: The issue allows attackers to inject arbitrary web scripts due to a var dump on $ POST variables found in the...