CVE-2021-24297

The Goto WordPress theme before 2.1 did not properly sanitize the formvalue JSON POST parameter in its tlfilter AJAX action, leading to an unauthenticated Reflected Cross-site Scripting XSS vulnerability...

PT-2021-15834

Name of the Vulnerable Software and Affected Versions Goto WordPress theme versions prior to 2.1 Description The issue is related to an unauthenticated Reflected Cross-site Scripting XSS vulnerability. It occurs because the formvalue JSON POST parameter in the tl filter AJAX action is not properl...

CVE-2021-24297: Improper Neutralization of Input During Web Page Generation

The Goto WordPress theme before 2.1 did not properly sanitize the formvalue JSON POST parameter in its tlfilter AJAX action, leading to an unauthenticated Reflected Cross-site Scripting XSS vulnerability...