CVE-2021-24314CWE-89

CVE-2021-24314: vulnerability in BoostifyThemes Goto

Goto < 2.1 - Unauthenticated Blind SQL Injection

Published · Updated

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.9%
The Goto WordPress theme before 2.1 did not sanitise, validate of escape the keywords GET parameter from its listing page before using it in a SQL statement, leading to an Unauthenticated SQL injection issue
Affected products
BoostifyThemes · Goto