Skip to content
Sign in
Not rated

CVE-2021-24297 The Goto WordPress theme before 2.1 did not properly sanitize the formvalue JSON POST parameter in its tl_filter AJAX…

Description

The Goto WordPress theme before 2.1 did not properly sanitize the formvalue JSON POST parameter in its tl_filter AJAX action, leading to an unauthenticated Reflected Cross-site Scripting (XSS) vulnerability.

Affected products and versions

Product Affected versions Fixed in
Goto 2.1 earliest → < 2.1 2.1

Other CVEs of Goto

The 2 CVEs of Goto →
CVE-2021-24235 The Goto WordPress theme before 2.0 does not sanitise the keywords and start_date GET parameter on its Tour List page,… Not rated
Track this CVE