yet_another_stars_rating_project CVEs

Beta · best-effort

3 CVEs tagged to vendor yet_another_stars_rating_project — 0 Critical, 1 High, 1 Medium, 1 Low, 0 Unrated.

See this archive with more filters View vendor evidence profile Explore

CVE-2023-37867

Published Nov 30, 2023

Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in YetAnotherStarsRating.Com YASR – Yet Another Star Rating Plugin for WordPress.This issue affects YASR – Yet Anot…

CVSS 3.7 · Low

Vendor/product tagsBeta · best-effort

CVE-2022-23980

Published Feb 4, 2022

Cross-Site Scripting (XSS) vulnerability discovered in Yasr – Yet Another Stars Rating WordPress plugin (versions <= 2.9.9), vulnerable at parameter 'source'.

CVSS 4.7 · Medium

Vendor/product tagsBeta · best-effort

CVE-2015-9465

Published Oct 10, 2019

The yet-another-stars-rating plugin before 0.9.1 for WordPress has yasr_get_multi_set_values_and_field SQL injection via the set_id parameter.

CVSS 8.8 · High

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1