CVE-2021-24316
Assigner: WPScan
Published: 2021-06-01T11:33:30
State: PUBLISHED
affected: product: Mediumish
vendor: WowThemes
versions: lessThanOrEqual: 1.0.47
status: affected
version: 1.0.47
versionType: custom
credits: value: m0ze
descriptions: value: The search feature of the Mediumish WordPress theme through 1.0.47 does not properly sanitise it's 's' GET parameter before output it back the page, leading to the Cross-SIte Scripting issue.
problemTypes: descriptions: cweId: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
type: CWE
source: discovery: UNKNOWN
title: Mediumish <= 1.0.47 - Unauthenticated Reflected Cross-Site Scripting (XSS)
x_generator: WPScan CVE Generator