Security Advisory

CVE-2021-24407

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-07-06 11:03:33
Last updated 2024-08-03 19:28:23
Assigner WPScan
State PUBLISHED

Description

The Jannah WordPress theme before 5.4.5 did not properly sanitize the query POST parameter in its tie_ajax_search AJAX action, leading to a Reflected Cross-site Scripting (XSS) vulnerability.