پلاگین پرداخت دلخواه, CVE-2022-4307

CVE, Research URL: CVE-2022-4307
Home page URL: Security reports for پلاگین پرداخت دلخواه
Application: پلاگین پرداخت دلخواه
Published on: Jan 23, 2023
Research Description: The پلاگین پرداخت دلخواه WordPress plugin before 2.9.3 does not sanitise and escape some parameters, allowing unauthenticated attackers to send a request with XSS payloads, which will be triggered when a high privilege users such as admin visits a page from the plugin.
Affected versions: max 2.9.3.
Status: vulnerable