Boostifythemes Goto
3 CVEs affecting Boostifythemes Goto. Latest disclosed: 2021-05-24. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-24314 | Critical | 9.8 | 2021-05-17 | The Goto WordPress theme before 2.1 did not sanitise, validate of escape the keywords GET parameter from its listing page before using it in a SQL statement, l… |
CVE-2021-24297 | Medium | 6.1 | 2021-05-24 | The Goto WordPress theme before 2.1 did not properly sanitize the formvalue JSON POST parameter in its tl_filter AJAX action, leading to an unauthenticated Ref… |
CVE-2021-24235 | Medium | 6.1 | 2021-04-22 | The Goto WordPress theme before 2.0 does not sanitise the keywords and start_date GET parameter on its Tour List page, leading to an unauthenticated reflected… |