ByteOS Network

NVD Vulnerability Details :

CVE-2021-25121

Analyzed

Source-contact@wpscan.com

Published At-20 Jun, 2022 | 11:15

Updated At-05 Nov, 2022 | 02:40

The Rating by BestWebSoft WordPress plugin before 1.6 does not validate the submitted rating, allowing submission of long integer, causing a Denial of Service on the post/page when a user submit such rating

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	6.5	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Primary	2.0	4.0	MEDIUM	AV:N/AC:L/Au:S/C:N/I:N/A:P

CPE Matches

BestWebSoft

>>rating>>Versions before 1.6(exclusive)

cpe:2.3:a:bestwebsoft:rating:*:*:*:*:*:wordpress:*:*

Weaknesses

CWE ID	Type	Source
CWE-191	Primary	contact@wpscan.com
CWE-191	Secondary	nvd@nist.gov

References

Hyperlink	Source	Resource
https://wpscan.com/vulnerability/efb1ddef-2123-416c-a932-856d41ed836d	contact@wpscan.com	Exploit Third Party Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History