CVE-2021-24407: Tielabs Jannah

Medium severity, CVSS 6.1. EPSS: 2.6% chance of exploitation in the next 30 days.

The Jannah WordPress theme before 5.4.5 did not properly sanitize the 'query' POST parameter in its tie_ajax_search AJAX action, leading to a Reflected Cross-site Scripting (XSS) vulnerability.

Affected products

• Tielabs Jannah: before 5.4.5 (fixed in 5.4.5)

Published 2021-07-06. Last modified 2026-06-17.