CVE-2021-24407: falha em TieLabs Jannah
Jannah < 5.4.5 - Reflected Cross-Site Scripting (XSS)
Publicada em · Atualizada em
18Vexday Risk Score
Corrija em breve. Ela tem exploit funcional público.
ssvc Attendepss 2.6%
probabilidade de exploração
2.6%top 15% das CVEs
exploração observada
nãonenhuma fonte reporta
The Jannah WordPress theme before 5.4.5 did not properly sanitize the 'query' POST parameter in its tie_ajax_search AJAX action, leading to a Reflected Cross-site Scripting (XSS) vulnerability.
Produtos afetados
TieLabs · JannahCVEs relacionadas — TieLabs Jannah
No mesmo produto, das mais perigosas para as menos.
CVE-2021-24364—Jannah < 5.4.4 - Reflected Cross-Site Scripting (XSS)EPSS 2.0%CVE-2026-25464HIGHWordPress Jannah theme <= 7.6.4 - Local File Inclusion vulnerabilityEPSS 0.6%CVE-2025-53334HIGHWordPress Jannah Theme < 7.5.1 - Local File Inclusion VulnerabilityEPSS 0.5%CVE-2025-64206CRITICALWordPress Jannah theme <= 7.6.0 - PHP Object Injection vulnerabilityEPSS 0.5%CVE-2025-64205HIGHWordPress Jannah theme <= 7.6.0 - Local File Inclusion vulnerabilityEPSS 0.4%CVE-2025-64207HIGHWordPress Jannah theme <= 7.6.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%