Skip to content
Not rated

CVE-2021-24893 The Stars Rating WordPress plugin before 3.5.1 does not validate the submitted rating, allowing submission of long…

Description

The Stars Rating WordPress plugin before 3.5.1 does not validate the submitted rating, allowing submission of long integer, causing a Denial of Service in the comments section, or pending comment dashboard depending if the user sent it as unauthenticated or authenticated.

Affected products and versions

Product Affected versions Fixed in
Stars Rating 3.5 earliest → < 3.5.1 3.5.1
Track this CVE