Description
The Goto WordPress theme before 2.1 did not sanitise, validate of escape the keywords GET parameter from its listing page before using it in a SQL statement, leading to an Unauthenticated SQL injection issue
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| BoostifyThemes | Goto | 2.1 – < 2.1 | 2.1 |