CVE-2021-24894

Katalog CVE

CVSS 6.5 · Medium EPSS 1,5%

Kerentanan Integer Underflow (Wrap or Wraparound) pada implecode reviews plus. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

The Reviews Plus WordPress plugin before 1.2.14 does not validate the submitted rating, allowing submission of long integer, causing a Denial of Service in the review section when an authenticated user submit such rating and the reviews are set to be displayed on the post/page

Rincian

Terbit di NVD

23 November 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-191: Integer Underflow (Wrap or Wraparound)
CWE-20: Improper Input Validation

EPSS (30 hari)

1,5% peluang dieksploitasi; lebih tinggi dari 73,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://plugins.trac.wordpress.org/changeset/2618234 patch · advisory pihak ketiga
• https://wpscan.com/vulnerability/79bb5acb-ea56-41a9-83a1-28a181ae41e2 exploit · advisory pihak ketiga