CVE-2021-24297

The Goto WordPress theme before 2.1 did not properly sanitize the formvalue JSON POST parameter in its tlfilter AJAX action, leading to an unauthenticated Reflected Cross-site Scripting XSS vulnerability...

CVE-2021-24297

The CVE-2021-24297 entry applies to the WordPress Goto theme prior to version 2.1, where the tl_filter AJAX action did not properly sanitize the formvalue JSON POST parameter. This caused an unauthenticated reflected XSS vulnerability. Affected product: Goto WordPress theme (