| Package | Affected versions | Patched versions |
|---|---|---|
| pardakht-delkhah | < 2.9.3 | 2.9.3 |
The پلاگین پرداخت دلخواه WordPress plugin before 2.9.3 does not sanitise and escape some parameters, allowing unauthenticated attackers to send a request with XSS payloads, which will be triggered when a high privilege users such as admin visits a page from the plugin.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free