CVE-2021-24407

MEDIUM 6.1CVE-2021-24407 · Published 06/07/2021 · updated 17/06/2026

In short

CVE-2021-24407 is a MEDIUM (CVSS 6.1) vulnerability affecting jannah (tielabs).
Chance of exploitation in the next 30 days (EPSS): 2.6%, higher than 85.4% of all vulnerabilities.
Fix: update to 5.4.5 or later.

Package	Affected versions	Patched versions
jannah tielabs	`< 5.4.5`	`5.4.5`

Description

The Jannah WordPress theme before 5.4.5 did not properly sanitize the 'query' POST parameter in its tie_ajax_search AJAX action, leading to a Reflected Cross-site Scripting (XSS) vulnerability.

References

wpscan.com/vulnerability/fba9f010-1202-4eea-a6f5-78865c084153 · Exploit

More vulnerabilities in jannah

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free