CVE-2021-24320

MEDIUMNuclei

Bello < 1.6.0 - Unauthenticated Reflected XSS & XFS

Title source: CVE List
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2021-24320 has a selected CVSS score of 6.1 (medium); EIP currently links 2 curated repository PoCs and 1 Nuclei template.

Description

The Bello - Directory & Listing WordPress theme before 1.6.0 did not properly sanitise and escape its listing_list_view, bt_bb_listing_field_my_lat, bt_bb_listing_field_my_lng, bt_bb_listing_field_distance_value, bt_bb_listing_field_my_lat_default, bt_bb_listing_field_keyword, bt_bb_listing_field_location_autocomplete, bt_bb_listing_field_price_range_from and bt_bb_listing_field_price_range_to parameter in ints listing page, leading to reflected Cross-Site Scripting issues.

Description source: CVE List

Exploitation context

Available material

Curated repository PoCs
2
Nuclei templates
1

Affected products and versions

1
ProductSourceVersion range

Bello - Directory & Listing

Browse BoldThemes / Bello - Directory & Listing
CVE List1.6.0 to < 1.6.0affected

Proofs of concept

2

Curated repository PoCs

GitHubCVE-2021-24320Curated repository PoCby 0xd3vil127Not analyzed1 file

Python · 3.6 KiB

GitHub
PoC details
GitHubCVE-2021-24320Curated repository PoCby yubsy112Not analyzed1 file

Python · 3.6 KiB

GitHub
PoC details

Nuclei templates

1
ProjectDiscoveryMEDIUMWordPress Bello Directory & Listing Theme <1.6.0 - Cross-Site ScriptingCVSS 6.1

WordPress Bello Directory & Listing theme before 1.6.0 contains a reflected cross-site scripting vulnerability. It does not properly sanitize and escape the listing_list_view, bt_bb_listing_field_my_lat, bt_bb_listing_field_my_lng, bt_bb_listing_field_distance_value, bt_bb_listing_field_my_lat_default, bt_bb_listing_field_keyword, bt_bb_listing_field_location_autocomplete, bt_bb_listing_field_price_range_from and bt_bb_listing_field_price_range_to parameters in the ints listing page.

Impact

Successful exploitation of this vulnerability could allow an attacker to inject malicious scripts into the website, leading to potential data theft, session hijacking, or defacement.

Remediation

Update WordPress Bello Directory & Listing Theme to version 1.6.0 or later to mitigate the vulnerability.

WeaknessesCWE-79
Authorsdaffainfo
Template tagscve2021cvewordpressxsswp-pluginwpscanbold-themesvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CPE: cpe:2.3:a:bold-themes:bello:*:*:*:*:*:wordpress:*:*
https://m0ze.ru/vulnerability/%5B2021-03-21%5D-%5BWordPress%5D-%5BCWE-79%5D-Bello-WordPress-Theme-v1.5.9.txt https://wpscan.com/vulnerability/6b5b42fd-028a-4405-b027-3266058029bb https://nvd.nist.gov/vuln/detail/CVE-2021-24320 https://github.com/ARPSyndicate/cvemon https://github.com/ARPSyndicate/kenzer-templates

Source: ProjectDiscovery

References

3