Lucene search
+L

3 matches found

OSV
OSV
•added 2021/06/21 8:15 p.m.•20 views

CVE-2021-24364

The Jannah WordPress theme before 5.4.4 did not properly sanitize the options JSON parameter in its tiegetuserweather AJAX action before outputting it back in the page, leading to a Reflected Cross-Site Scripting XSS vulnerability...

6.1CVSS6.4AI score0.01975EPSS
SaveExploits3References1
Positive Technologies
Positive Technologies
•added 2021/06/21 12:00 a.m.•5 views

PT-2021-15900

Name of the Vulnerable Software and Affected Versions Jannah WordPress theme versions prior to 5.4.4 Description The issue arises from the improper sanitization of the options JSON parameter in the tie get user weather AJAX action, leading to a Reflected Cross-Site Scripting XSS issue. This occur...

6.1CVSS0.01975EPSS
SaveExploits3References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/21 12:00 a.m.•6 views

CVE-2021-24364: Improper Neutralization of Input During Web Page Generation

The Jannah WordPress theme before 5.4.4 did not properly sanitize the options JSON parameter in its tiegetuserweather AJAX action before outputting it back in the page, leading to a Reflected Cross-Site Scripting XSS vulnerability...

6.1CVSS5.8AI score0.01975EPSS
SaveExploits3References2
Rows per page
Query Builder