3 matches found
CVE-2021-24235
The Goto WordPress theme before 2.0 does not sanitise the keywords and startdate GET parameter on its Tour List page, leading to an unauthenticated reflected Cross-Site Scripting issue...
6.1CVSS0.02927EPSS
SaveExploits2References2
CVE-2021-24235
The Goto WordPress theme before 2.0 does not sanitise the keywords and startdate GET parameter on its Tour List page, leading to an unauthenticated reflected Cross-Site Scripting issue...
6.1CVSS6.4AI score0.02927EPSS
SaveExploits2References2
Goto - Tour & Travel < 2.0 - Unauthenticated Reflected XSS
The theme does not sanitise the keywords and startdate GET parameter on its Tour List page, leading to an unauthenticated reflected Cross-Site Scripting issue. PoC Payload:...
4.3CVSS0.2AI score0.02927EPSS
SaveExploits2References1Affected Software1
20