CVE-2021-24893 Stars Rating < 3.5.1 - Comments Denial of Service

2022-01-0312:49:06

CWE-400

WPScan

www.cve.org

cve-2021-24893

wordpress plugin

comments denial of service

EPSS

0.002

Percentile

57.7%

JSON

The Stars Rating WordPress plugin before 3.5.1 does not validate the submitted rating, allowing submission of long integer, causing a Denial of Service in the comments section, or pending comment dashboard depending if the user sent it as unauthenticated or authenticated.

CNA Affected

[
  {
    "product": "Stars Rating",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "3.5.1",
        "status": "affected",
        "version": "3.5.1",
        "versionType": "custom"
      }
    ]
  }
]

References

wpscan.com/vulnerability/05d3af69-20b4-499a-8322-2b53674d6a58

EPSS

0.002

Percentile

57.7%

JSON

Related for CVELIST:CVE-2021-24893