TI-2021-16681 CVE-2021-39309 · GHSA-7vq5-4m2m-qff6Parsian Bank Gateway for Woocommerce <= 1.0 Reflected Cross-Site ScriptingPriority LOW 29The Parsian Bank Gateway for Woocommerce WordPress plugin is vulnerable to Reflected Cross-Site Scripting via and parameter due to a var_dump() on $_POST variables found in the ~/vendor/dpsoft/parsian-payment/sample/roll…CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00782 · Published 2021-12-14 · No fix listed CWE-79