Unknown Jnews vulnerabilities

1 vulnerability

Known vulnerabilities in Unknown Jnews, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.1CVE-2021-24342jnewsjnews+2
EPSS score
1.98%
The JNews WordPress theme before 8.0.6 did not sanitise the cat_id parameter in the POST request /?ajax-request=jnews (with action=jnews_build_mega_category_*), leading to a Reflected Cross-Site Scripting (XSS) issue.