WordPress Jannah Theme <5.4.4 - Cross-Site Scripting Detection

WordPress Jannah theme before 5.4.4 contains a reflected cross-site scripting vulnerability. It does not properly sanitize the options JSON parameter in its tiegetuserweather AJAX action before outputting it back in the page. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Jannah theme...

PT-2021-15900

Name of the Vulnerable Software and Affected Versions Jannah WordPress theme versions prior to 5.4.4 Description The issue arises from the improper sanitization of the options JSON parameter in the tie get user weather AJAX action, leading to a Reflected Cross-Site Scripting XSS issue. This occur...

CVE-2021-24364: Improper Neutralization of Input During Web Page Generation

The Jannah WordPress theme before 5.4.4 did not properly sanitize the options JSON parameter in its tiegetuserweather AJAX action before outputting it back in the page, leading to a Reflected Cross-Site Scripting XSS vulnerability...