Input validation vulnerability in Parsi Date 4.0.1

The Parsi Date plugin for WordPress, which is used on websites up to version 4.0.1, is vulnerable to malicious code attacks. This means that if someone is able to trick a user into clicking a link, they can insert malicious code into the website. This malicious code can then be used to cause damage or gain access to the website. To prevent this, input sanitization and output escaping on urls must be improved.