CVE-2021-24314
Goto < 2.1 - Unauthenticated Blind SQL Injection
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 1.9%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
17 May 2021Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
The Goto WordPress theme before 2.1 did not sanitise, validate of escape the keywords GET parameter from its listing page before using it in a SQL statement, leading to an Unauthenticated SQL injection issue
Affected products
BoostifyThemes · GotoWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →