CVE-2021-24314 Goto < 2.1 - Unauthenticated Blind SQL Injection

2021-05-1716:48:53

CWE-89

WPScan

www.cve.org

0.003 Low

EPSS

Percentile

68.5%

JSON

The Goto WordPress theme before 2.1 did not sanitise, validate of escape the keywords GET parameter from its listing page before using it in a SQL statement, leading to an Unauthenticated SQL injection issue

CNA Affected

[
  {
    "product": "Goto",
    "vendor": "BoostifyThemes",
    "versions": [
      {
        "lessThan": "2.1",
        "status": "affected",
        "version": "2.1",
        "versionType": "custom"
      }
    ]
  }
]