PT-2022-9675 · Bestwebsoft · Rating By Bestwebsoft Wordpress Plugin

Drew Jones · Published 2022-06-20 · Updated 2022-11-05 · CVE-2021-25121

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions The Rating by BestWebSoft WordPress plugin versions prior to 1.6

Description The issue allows submission of a long integer as a rating, causing a Denial of Service on the post/page when such a rating is submitted. This occurs due to the lack of validation of the submitted rating.

Recommendations For versions prior to 1.6, update to version 1.6 or later to resolve the issue. As a temporary workaround, consider implementing input validation for ratings to prevent the submission of long integers.

Exploit

Fix

DoS

Integer Underflow

Weakness Enumeration

CWE-191

Related Identifiers

CVE-2021-25121

Affected Products

Rating By Bestwebsoft Wordpress Plugin

References · 6

• 🔥 https://wpscan.com/vulnerability/efb1ddef-2123-416c-a932-856d41ed836d · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-25121 · Security Note
• https://osv.dev/vulnerability/CVE-2021-25121 · Vendor Advisory
• https://t.me/cvenotify/37122 · Telegram Post
• https://t.me/cvenotify/32565 · Telegram Post
• https://t.me/cvenotify/31886 · Telegram Post