PT-2021-15857

Name of the Vulnerable Software and Affected Versions The Bello - Directory & Listing WordPress theme versions prior to 1.6.0 Description The issue arises from the theme's failure to properly sanitise and escape certain parameters in its listing page, leading to reflected Cross-Site Scripting...

PT-2021-15858

Name of the Vulnerable Software and Affected Versions The Bello - Directory & Listing WordPress theme versions prior to 1.6.0 Description The issue arises from the lack of sanitization of certain parameters before they are used in SQL statements, leading to SQL Injection issues. The parameters bt...

PT-2021-15856

Name of the Vulnerable Software and Affected Versions The Bello - Directory & Listing WordPress theme versions prior to 1.6.0 Description The issue arises from the theme not properly sanitizing its post excerpt parameter before outputting it back in the "shop/my-account/bello-listing-endpoint/"...