CVE-2021-24894
23.11.2021, 20:15
The Reviews Plus WordPress plugin before 1.2.14 does not validate the submitted rating, allowing submission of long integer, causing a Denial of Service in the review section when an authenticated user submit such rating and the reviews are set to be displayed on the post/page
| Vendor | Product | Version |
|---|---|---|
| implecode | reviews_plus | 𝑥 < 1.2.14 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-191 - Integer Underflow (Wrap or Wraparound)The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.
- CWE-20 - Improper Input ValidationThe product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.