Medium severity6.1NVD Advisory· Published Jun 1, 2021· Updated Jun 17, 2026

CVE-2021-24316

Description

The search feature of the Mediumish WordPress theme through 1.0.47 does not properly sanitise it's 's' GET parameter before output it back the page, leading to the Cross-SIte Scripting issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Wowthemes/Mediumish2 versions
cpe:2.3:a:wowthemes:mediumish:*:*:*:*:*:wordpress:*:*+ 1 more
- cpe:2.3:a:wowthemes:mediumish:*:*:*:*:*:wordpress:*:*range: <=1.0.47
- (no CPE)range: 1.0.47
WordPress/Mediumishllm-fuzzy
Range: <=1.0.47

Patches

Vulnerability mechanics

References

m0ze.ru/vulnerability/%5B2021-03-14%5D-%5BWordPress%5D-%5BCWE-79%5D-Mediumish-WordPress-Theme-v1.0.47.txtnvdExploitThird Party Advisory
wpscan.com/vulnerability/57e27de4-58f5-46aa-9b59-809705733b2envdExploitThird Party Advisory
www.wowthemes.net/themes/mediumish-wordpress/nvdProductVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.005
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000