CVE-2021-24321

The Bello - Directory & Listing WordPress theme before 1.6.0 did not sanitise the btbblistingfieldpricerangeto, btbblistingfieldnowopen, btbblistingfieldmylng, listinglistview and btbblistingfieldmylat parameters before using them in a SQL statement, leading to SQL Injection issues...

SQL Injection Scanning Attempt Over HTTP (CVE-2021-24321)

SQL Injection Scanning Attempt Over HTTP...

CVE-2021-24321 Bello < 1.6.0 - Unauthenticated Blind SQL Injection

The Bello - Directory & Listing WordPress theme before 1.6.0 did not sanitise the btbblistingfieldpricerangeto, btbblistingfieldnowopen, btbblistingfieldmylng, listinglistview and btbblistingfieldmylat parameters before using them in a SQL statement, leading to SQL Injection issues...

CVE-2021-24321

The Bello WordPress theme (prior to v1.6.0) is vulnerable to unauthenticated blind SQL injection due to not sanitising parameters such as bt_bb_listing_field_price_range_to, bt_bb_listing_field_now_open, bt_bb_listing_field_my_lng, listing_list_view, and bt_bb_listing_field_my_lat before using th...