CVE-2021-24319

Name of the Vulnerable Software and Affected Versions The Bello - Directory & Listing WordPress theme versions prior to 1.6.0

Description The issue arises from the theme not properly sanitizing its post excerpt parameter before outputting it back in the "shop/my-account/bello-listing-endpoint/" page, leading to a Cross-Site Scripting issue.

Recommendations For versions prior to 1.6.0, update to version 1.6.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the "shop/my-account/bello-listing-endpoint/" page until the update is applied. Avoid using the post excerpt parameter in the affected page until the issue is resolved.