Skip to content
Sign in
Not rated

CVE-2021-24235 The Goto WordPress theme before 2.0 does not sanitise the keywords and start_date GET parameter on its Tour List page,…

Description

The Goto WordPress theme before 2.0 does not sanitise the keywords and start_date GET parameter on its Tour List page, leading to an unauthenticated reflected Cross-Site Scripting issue.

Affected products and versions

Product Affected versions Fixed in
Goto 2.0 earliest → < 2.0 2.0

Other CVEs of Goto

The 2 CVEs of Goto →
CVE-2021-24297 The Goto WordPress theme before 2.1 did not properly sanitize the formvalue JSON POST parameter in its tl_filter AJAX… Not rated
Track this CVE