CVE-2021-24316: Wowthemes Mediumish

Medium severity, CVSS 6.1. EPSS: 6.4% chance of exploitation in the next 30 days.

The search feature of the Mediumish WordPress theme through 1.0.47 does not properly sanitise it's 's' GET parameter before output it back the page, leading to the Cross-SIte Scripting issue.

Affected products

• Wowthemes Mediumish: up to and including 1.0.47

Published 2021-06-01. Last modified 2026-06-17.