Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-24314

Goto < 2.1 - Unauthenticated Blind SQL Injection

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The Goto WordPress theme before 2.1 did not sanitise, validate of escape the keywords GET parameter from its listing page before using it in a SQL statement, leading to an Unauthenticated SQL injection issue

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

BoostifyThemes Goto

  • 2.1 to < 2.1affected

References