Tielabs

9 CVEs across 3 Tielabs products. Browse Tielabs vulnerabilities, severities, and proof-of-concept exploits.

Tielabs products with known CVEs

ProductCVEs
Jannah7
Jannah - Extensions1
Sahifa1
Tielabs CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-25464High8.12026-03-25Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in TieLabs Jannah jannah allows PHP Local…
CVE-2025-64207High7.12025-12-18Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TieLabs Jannah jannah allows DOM-Based XSS.This issue aff…
CVE-2025-64206Critical9.82025-12-18Deserialization of Untrusted Data vulnerability in TieLabs Jannah jannah allows Object Injection.This issue affects Jannah: from n/a through <= 7.6.0.
CVE-2025-64205High8.12025-12-18Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in TieLabs Jannah jannah allows PHP Local…
CVE-2025-64208Medium6.52025-10-29Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TieLabs Jannah - Extensions jannah-extensions allows DOM-…
CVE-2025-64202Medium6.52025-10-29Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TieLabs Sahifa sahifa allows DOM-Based XSS.This issue aff…
CVE-2025-53334High8.12025-08-28Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in TieLabs Jannah jannah allows PHP Local…
CVE-2021-24407Medium6.12021-07-06The Jannah WordPress theme before 5.4.5 did not properly sanitize the 'query' POST parameter in its tie_ajax_search AJAX action, leading to a Reflected Cross-s…
CVE-2021-24364Medium6.12021-06-21The Jannah WordPress theme before 5.4.4 did not properly sanitize the options JSON parameter in its tie_get_user_weather AJAX action before outputting it back…