medium6.1
CVE-2021-24407
The Jannah WordPress theme before 5.4.5 did not properly sanitize the 'query' POST parameter in its tie_ajax_search AJAX action, leading to a Reflected Cross-s…
Impact
The Jannah WordPress theme before 5.4.5 did not properly sanitize the 'query' POST parameter in its tie_ajax_search AJAX action, leading to a Reflected Cross-site Scripting (XSS) vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tielabs | Jannah | before 5.4.5 |