CVE-2021-24321

Name of the Vulnerable Software and Affected Versions The Bello - Directory & Listing WordPress theme versions prior to 1.6.0

Description The issue arises from the lack of sanitization of certain parameters before they are used in SQL statements, leading to SQL Injection issues. The parameters bt bb listing field price range to, bt bb listing field now open, bt bb listing field my lng, listing list view, and bt bb listing field my lat are not properly sanitized.

Recommendations For versions prior to 1.6.0, update to version 1.6.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the parameters bt bb listing field price range to, bt bb listing field now open, bt bb listing field my lng, listing list view, and bt bb listing field my lat to minimize the risk of exploitation.