CVE-2021-24320

The CVE-2021-24320 entry concerns the WordPress Bello - Directory & Listing theme (pre-1.6.0). Affected component: listing-related parameters on the listing page (listing_list_view, bt_bb_listing_field_my_lat, bt_bb_listing_field_my_lng, bt_bb_listing_field_distance_value, bt_bb_listing_field_my_...

CVE-2021-24321

The Bello WordPress theme (prior to v1.6.0) is vulnerable to unauthenticated blind SQL injection due to not sanitising parameters such as bt_bb_listing_field_price_range_to, bt_bb_listing_field_now_open, bt_bb_listing_field_my_lng, listing_list_view, and bt_bb_listing_field_my_lat before using th...

CVE-2021-24319

The affected product is the Bello WordPress theme (before version 1.6.0). The vulnerability (CVE-2021-24319) is an authenticated Cross-Site Scripting (XSS) in the shop/my-account/bello-listing-endpoint/ page caused by improper sanitization of the post_excerpt parameter before output. Exploitation...