CVEs-PoC/2021/CVE-2021-24407.md

CVE-2021-24407

Description

The Jannah WordPress theme before 5.4.5 did not properly sanitize the 'query' POST parameter in its tie_ajax_search AJAX action, leading to a Reflected Cross-site Scripting (XSS) vulnerability.

POC

Reference

• https://wpscan.com/vulnerability/fba9f010-1202-4eea-a6f5-78865c084153
• https://wpscan.com/vulnerability/fba9f010-1202-4eea-a6f5-78865c084153

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/ARPSyndicate/kenzer-templates