← Back to CVE List

CVE-2021-24297

Published: 2021-05-24T11:15Z
Last Modified: 2024-11-21T05:52Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
The Goto WordPress theme before 2.1 did not properly sanitize the formvalue JSON POST parameter in its tl_filter AJAX action, leading to an unauthenticated Reflected Cross-site Scripting (XSS) vulnerability. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt