CVE-2021-24319: Bold-Themes Bello

Medium severity, CVSS 5.4. EPSS: 1.7% chance of exploitation in the next 30 days.

The Bello - Directory & Listing WordPress theme before 1.6.0 did not properly sanitise its post_excerpt parameter before outputting it back in the shop/my-account/bello-listing-endpoint/ page, leading to a Cross-Site Scripting issue

Affected products

• Bold-Themes Bello: before 1.6.0 (fixed in 1.6.0)

Published 2021-06-01. Last modified 2026-06-17.