QwikSec

Security Database

CVE

CWE

Training

CVE-2021-24321

Published: Jun 1, 2021

Modified: Aug 3, 2024

PUBLISHED

Description

The Bello - Directory & Listing WordPress theme before 1.6.0 did not sanitise the bt_bb_listing_field_price_range_to, bt_bb_listing_field_now_open, bt_bb_listing_field_my_lng, listing_list_view and bt_bb_listing_field_my_lat parameters before using them in a SQL statement, leading to SQL Injection issues

Vendor	Product	Versions
BoldThemes	Bello - Directory & Listing	affected `1.6.0 - < 1.6.0`

Weaknesses (CWE)

References

https://wpscan.com/vulnerability/7314f9fa-c047-4e0c-b145-940240a50c02

x_refsource_CONFIRM

https://m0ze.ru/vulnerability/%5B2021-03-21%5D-%5BWordPress%5D-%5BCWE-89%5D-Bello-WordPress-Theme-v1.5.9.txt

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.