Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: TieLabs Component: Jannah Clear all filters
TI-2021-06699 CVE-2021-24407 · GHSA-f4fp-w82v-76w6

Jannah < 5.4.5 - Reflected Cross-Site Scripting (XSS)

Priority LOW 32

The Jannah WordPress theme before 5.4.5 did not properly sanitize the 'query' POST parameter in its tie_ajax_search AJAX action, leading to a Reflected Cross-site Scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02591 Published 2021-07-06 Fixed in 5.4.5 CWE-79
TI-2021-06656 CVE-2021-24364 · GHSA-3wxv-m6v8-9vx3

Jannah < 5.4.4 - Reflected Cross-Site Scripting (XSS)

Priority LOW 31

The Jannah WordPress theme before 5.4.4 did not properly sanitize the options JSON parameter in its tie_get_user_weather AJAX action before outputting it back in the page, leading to a Reflected Cross-Site Scripting (XSS…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01975 Published 2021-06-21 Fixed in 5.4.4 CWE-79