Unobtrusive AJAX Star Rating Bar Multiple Input Validation Vulnerabilities

Unobtrusive AJAX Star Rating Bar Multiple Input Validation Vulnerabilities

Unobtrusive AJAX Star Rating Bar is prone to input-validation vulnerabilities, including an SQL-injection issue, a security-bypass issue, and a cross-site scripting issue, because the application fails to sanitize user-supplied input.

A successful exploit may allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, exploit latent vulnerabilities in the underlying database, and bypass certain security restriction to inject arbitrary HTTP header and body data.

Versions prior to Unobtrusive AJAX Star Rating Bar 1.2.0 are affected.