Fivestar Module For Drupal
1 CVEs
product
Monthly
The Fivestar module 6.x-1.x before 6.x-1.20 for Drupal does not properly validate voting data, which allows remote attackers to manipulate voting averages via a negative value in the vote parameter. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.
Information Disclosure
Fivestar Module For Drupal
NVD
CVSS 2.0
5.0
EPSS
0.3%
EPSS 0%
CVSS 5.0
MEDIUM
POC
PATCH
This Month
The Fivestar module 6.x-1.x before 6.x-1.20 for Drupal does not properly validate voting data, which allows remote attackers to manipulate voting averages via a negative value in the vote parameter. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.
Information Disclosure
Fivestar Module For Drupal
NVD