2 matches found
CVE-2021-24297
The Goto WordPress theme before 2.1 did not properly sanitize the formvalue JSON POST parameter in its tlfilter AJAX action, leading to an unauthenticated Reflected Cross-site Scripting XSS vulnerability...
6.1CVSS5.8AI score0.00822EPSS
SaveExploits2References1
CVE-2021-24297: Improper Neutralization of Input During Web Page Generation
The Goto WordPress theme before 2.1 did not properly sanitize the formvalue JSON POST parameter in its tlfilter AJAX action, leading to an unauthenticated Reflected Cross-site Scripting XSS vulnerability...
6.1CVSS5.8AI score0.00822EPSS
SaveExploits2References2
20