CVE-2021-24389: 
WordPress vulnerability analysis and mitigation

CVE-2021-24389 affects the WP Foodbakery WordPress plugin and FoodBakery WordPress theme versions before 2.2. The vulnerability was discovered by Truoc Phan from Techlab Corporation and was publicly disclosed on June 14, 2021. This security issue is classified as a Reflected Cross-Site Scripting (XSS) vulnerability (WPScan).

The vulnerability stems from improper sanitization of the 'foodbakery_radius' parameter before it is output back in the response. This security flaw has been assigned a CVSS score of 6.1 (Medium) and is categorized under CWE-79. The vulnerability is classified as an A7 Cross-Site Scripting (XSS) issue according to the OWASP Top 10 (WPScan).

As an unauthenticated Reflected Cross-Site Scripting vulnerability, this flaw could allow attackers to inject malicious scripts that execute in users' browsers when they visit specially crafted URLs. This could potentially lead to theft of sensitive information or manipulation of the website's content as displayed to users (WPScan).

The vulnerability has been fixed in version 2.2 of both the WP Foodbakery plugin and the FoodBakery theme. Users are advised to update to this version or later to protect against this security issue (WPScan).