parsi_date vulnerabilities

CVEs whose affected-version data names the parsi_date package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-97642Medium· 6.4

yesterday

Wp Parsidate <= 6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'theme' Block Attribute

The Wp Parsidate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the calendar Gutenberg block's 'theme' attribute in versions up to, and including, 6.4. This is due to insufficient input sanitization and output esca…

▾ Sunlitman4toman · Parsi Date | بسته فارسی ساز وردپرس و ووکامرس پارسی دیتEPSS 0.33%via CVEORG