CVE-2021-24321: vulnerability in BoldThemes Bello - Directory & Listing
Bello < 1.6.0 - Unauthenticated Blind SQL Injection
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
15Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 67%
The Bello - Directory & Listing WordPress theme before 1.6.0 did not sanitise the bt_bb_listing_field_price_range_to, bt_bb_listing_field_now_open, bt_bb_listing_field_my_lng, listing_list_view and bt_bb_listing_field_my_lat parameters before using them in a SQL statement, leading to SQL Injection issues
Affected products
BoldThemes · Bello - Directory & ListingRelated CVEs — BoldThemes Bello - Directory & Listing
In the same product, most dangerous first.