Read the docs

Jnews

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Jnews records in CISA KEV

No Jnews vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Jnews 1 record LOW

Records

1 record in Jnews · all components

TI-2021-06634 CVE-2021-24342 · GHSA-39gf-rwjm-m5hw

JNews < 8.0.6 - Reflected Cross-Site Scripting (XSS)

Priority LOW 31

The JNews WordPress theme before 8.0.6 did not sanitise the cat_id parameter in the POST request /?ajax-request=jnews (with action=jnews_build_mega_category_*), leading to a Reflected Cross-Site Scripting (XSS) issue.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01975 Published 2021-06-07 Fixed in 8.0.6 CWE-79
Open these records in search →