{ "schema_version": "1.4.0", "id": "GHSA-pf4x-fwwq-h7vv", "modified": "2022-07-02T00:00:30Z", "published": "2022-01-04T00:00:52Z", "aliases": [ "CVE-2021-24893" ], "details": "The Stars Rating WordPress plugin before 3.5.1 does not validate the submitted rating, allowing submission of long integer, causing a Denial of Service in the comments section, or pending comment dashboard depending if the user sent it as unauthenticated or authenticated.", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-24893" }, { "type": "WEB", "url": "https://wpscan.com/vulnerability/05d3af69-20b4-499a-8322-2b53674d6a58" } ], "database_specific": { "cwe_ids": [ "CWE-191", "CWE-20", "CWE-400" ], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2022-01-03T13:15:00Z" } }