The Jannah WordPress theme before 5.4.5 did not properly sanitize the 'query' POST parameter in its tie_ajax_search AJAX action, leading to a Reflected Cross-site Scripting (XSS) vulnerability.
CVSS 3.1MEDIUM 6.1·Network·No auth·User interaction·EPSS 0.02591·Published 2021-07-06·Fixed in 5.4.5CWE-79
The Jannah WordPress theme before 5.4.4 did not properly sanitize the options JSON parameter in its tie_get_user_weather AJAX action before outputting it back in the page, leading to a Reflected Cross-Site Scripting (XSS…
CVSS 3.1MEDIUM 6.1·Network·No auth·User interaction·EPSS 0.01975·Published 2021-06-21·Fixed in 5.4.4CWE-79