Security Advisory

CVE-2021-24319

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-06-01 11:33:30
Last updated 2024-08-03 19:28:23
Assigner WPScan
State PUBLISHED

Description

The Bello - Directory & Listing WordPress theme before 1.6.0 did not properly sanitise its post_excerpt parameter before outputting it back in the shop/my-account/bello-listing-endpoint/ page, leading to a Cross-Site Scripting issue