Aller au contenu
Se connecter
Non notée

CVE-2021-24235 The Goto WordPress theme before 2.0 does not sanitise the keywords and start_date GET parameter on its Tour List page,…

Description

The Goto WordPress theme before 2.0 does not sanitise the keywords and start_date GET parameter on its Tour List page, leading to an unauthenticated reflected Cross-Site Scripting issue.

Produits et versions touchés

Produit Versions touchées Corrigé en
Goto 2.0 premières → < 2.0 2.0

Autres CVE de Goto

Les 2 CVE de Goto →
CVE-2021-24297 The Goto WordPress theme before 2.1 did not properly sanitize the formvalue JSON POST parameter in its tl_filter AJAX… Non notée
Suivre cette CVE