CVE-2021-24297

CVE-2021-24297: Goto < 2.1 - Reflected Cross-Site Scripting (XSS)

Vendor Unknown
Product Goto
Weakness CWE-79 · XSS
Published May 24, 2021
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Goto WordPress theme before 2.1 did not properly sanitize the formvalue JSON POST parameter in its tl_filter AJAX action, leading to an unauthenticated Reflected Cross-site Scripting (XSS) vulnerability.

Key dates

02Disclosure timeline

May 24, 2021 CVE published
August 3, 2024 Record updated