CVE-2021-24894CWE-191

Reviews Plus < 1.2.14 - Subscriber+ Reviews DoS

published November 23, 2021

CVSS
—
EPSS
1%
Percentile
73.7
In the wild
Unconfirmed
What it is

The Reviews Plus WordPress plugin before 1.2.14 does not validate the submitted rating, allowing submission of long integer, causing a Denial of Service in the review section when an authenticated user submit such rating and the reviews are set to be displayed on the post/page

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01480 · 73.7th percentile
Weakness
CWE-191 · Integer Underflow (Wrap or Wraparound)
Published
2021-11-23T19:16Z
EPSS history
Timeline
  • 23 NOV 19:16Z
    Reviews Plus < 1.2.14 - Subscriber+ Reviews DoS
    cvelistv5