Skip to content
Sign in
6.1 Medium

CVE-2022-4307 The پلاگین پرداخت دلخواه WordPress plugin before 2.9.3 does not sanitise and escape some parameters, allowing…

Description

The پلاگین پرداخت دلخواه WordPress plugin before 2.9.3 does not sanitise and escape some parameters, allowing unauthenticated attackers to send a request with XSS payloads, which will be triggered when a high privilege users such as admin visits a page from the plugin.

Affected products and versions

Product Affected versions Fixed in
پلاگین پرداخت دلخواه 2.9 earliest → < 2.9.3 2.9.3

Other CVEs of پلاگین پرداخت دلخواه

The 2 CVEs of پلاگین پرداخت دلخواه →
CVE-2024-6230 The پلاگین پرداخت دلخواه WordPress plugin through 2.9.8 does not have CSRF check in place when resetting its form… 6.5 Medium
Track this CVE