CVE-2021-24894
Medium
Description
The Reviews Plus WordPress plugin before 1.2.14 does not validate the submitted rating, allowing submission of long integer, causing a Denial of Service in the review section when an authenticated user submit such rating and the reviews are set to be displayed on the post/page
SeverityMedium
CVSS6.5
Exploit probability—
ProductImplecode Reviews Plus
PublishedNov 23, 2021
First seenNov 23, 2021
Weakness typeCWE-191CWE-191
How to fix
Update
- implecode reviews_plus1.2.14 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| implecode reviews_plus | v < 1.2.14 | 1.2.14 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.