CVE-2021-24320: Bello < 1.6.0 - Unauthenticated Reflected XSS & XFS
The Bello - Directory & Listing WordPress theme before 1.6.0 did not properly sanitise and escape its listinglistview, btbblistingfieldmylat, btbblistingfieldmylng, btbblistingfielddistancevalue, btbblistingfieldmylatdefault, btbblistingfieldkeyword, btbblistingfieldlocationautocomplete, btbblistingfieldpricerangefrom and btbblistingfieldpricerangeto parameter in ints listing page, leading to reflected Cross-Site Scripting issues.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-24320?
CVE-2021-24320 has been classified as a high-severity vulnerability due to its potential to allow cross-site scripting attacks.
How do I fix CVE-2021-24320?
To fix CVE-2021-24320, update the Bello - Directory & Listing WordPress theme to version 1.6.0 or later.
What versions are affected by CVE-2021-24320?
CVE-2021-24320 affects all versions of the Bello WordPress theme prior to 1.6.0.
What type of vulnerability is CVE-2021-24320?
CVE-2021-24320 is categorized as a cross-site scripting (XSS) vulnerability.
What are the potential consequences of CVE-2021-24320?
The potential consequences of CVE-2021-24320 include unauthorized data exposure and the execution of malicious scripts on user browsers.