PRODUCT PROFILE

jannah

暂无产品描述。

关联漏洞

共找到 2 条公开漏洞记录

中危CVE-2021-24407跨站脚本攻击2021/07/06

WordPress Jannah Theme <5.4.5 - Cross-Site Scripting

WordPress Jannah theme before 5.4.5 contains a reflected cross-site scripting vulnerability. It does not properly sanitize the 'query' POST parameter in its tie_ajax_search AJAX action.

PoC 已收录jannah

CVSS6.1EPSS 2.6%

中危CVE-2021-24364跨站脚本攻击2021/06/22

WordPress Jannah Theme <5.4.4 - Cross-Site Scripting

WordPress Jannah theme before 5.4.4 contains a reflected cross-site scripting vulnerability. It does not properly sanitize the options JSON parameter in its tie_get_user_weather AJAX action before outputting it back in the page.

PoC 已收录jannah

CVSS6.1EPSS 2.0%