Unrated severityNVD Advisory· Published May 17, 2021· Updated Aug 3, 2024
Goto < 2.1 - Unauthenticated Blind SQL Injection
CVE-2021-24314
Description
The Goto WordPress theme before 2.1 did not sanitise, validate of escape the keywords GET parameter from its listing page before using it in a SQL statement, leading to an Unauthenticated SQL injection issue
Affected products
1- Range: 2.1
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- m0ze.ru/vulnerability/%5B2021-03-24%5D-%5BWordPress%5D-%5BCWE-89%5D-Goto-WordPress-Theme-v2.0.txtmitrex_refsource_MISC
- wpscan.com/vulnerability/1cc6dc17-b019-49dd-8149-c8bba165eb30mitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.