Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2021-24320
HistoryJun 01, 2021 - 2:15 p.m.

CVE-2021-24320

2021-06-0114:15:09
CWE-79
[email protected]
web.nvd.nist.gov
4
wordpress
cross-site scripting
vulnerability

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

46.9%

JSON

The Bello - Directory & Listing WordPress theme before 1.6.0 did not properly sanitise and escape its listing_list_view, bt_bb_listing_field_my_lat, bt_bb_listing_field_my_lng, bt_bb_listing_field_distance_value, bt_bb_listing_field_my_lat_default, bt_bb_listing_field_keyword, bt_bb_listing_field_location_autocomplete, bt_bb_listing_field_price_range_from and bt_bb_listing_field_price_range_to parameter in ints listing page, leading to reflected Cross-Site Scripting issues.

Affected configurations

Nvd
Node
bold-themesbelloRange<1.6.0wordpress
VendorProductVersionCPE
bold-themesbello*cpe:2.3:a:bold-themes:bello:*:*:*:*:*:wordpress:*:*

Related

cvelist 1
nuclei 1
wpexploit 1
prion 1
patchstack 1
wpvulndb 1
cve 1
cvelist
cvelist
CVE-2021-24320 Bello < 1.6.0 - Unauthenticated Reflected XSS & XFS
2021-06-01 11:33:30
nuclei
nuclei
WordPress Bello Directory & Listing Theme <1.6.0 - Cross-Site Scripting
2021-07-15 03:38:35
wpexploit
wpexploit
Bello < 1.6.0 - Unauthenticated Reflected XSS & XFS
2021-05-16 00:00:00
prion
prion
Cross site scripting
2021-06-01 14:15:00
patchstack
patchstack
WordPress Bello - Directory & Listing premium theme <= 1.5.9 - Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability
2021-03-21 00:00:00
wpvulndb
wpvulndb
Bello < 1.6.0 - Unauthenticated Reflected XSS & XFS
2021-05-16 00:00:00
cve
cve
CVE-2021-24320
2021-06-01 14:15:09

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

46.9%

JSON
Related for NVD:CVE-2021-24320
cvelist1nuclei1wpexploit1prion1patchstack1wpvulndb1cve1