CVE-2021-24894

CVE-2021-24894: Reviews Plus < 1.2.14 - Subscriber+ Reviews DoS

Vendor Unknown

Product Reviews Plus

Weakness CWE-191

Published November 23, 2021

Last update August 3, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Reviews Plus WordPress plugin before 1.2.14 does not validate the submitted rating, allowing submission of long integer, causing a Denial of Service in the review section when an authenticated user submit such rating and the reviews are set to be displayed on the post/page

Key dates

02Disclosure timeline

November 23, 2021 CVE published

August 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2021-24894 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/191.html AskarLabs — CWE-191 write-up Integer Underflow

Related vulnerabilities

CVE-2021-24894: Reviews Plus < 1.2.14 - Subscriber+ Reviews DoS

01Description

02Disclosure timeline

03References

04Related CVE