CVE-2022-1391

The Cab fare calculator WordPress plugin before 1.0.4 does not validate the controller parameter before using it in require statements, which could lead to Local File Inclusion issues.

Score

CVSS 3.1 9.8 Critical

Status

Modified - contact@wpscan.com

Published

2022-04-25

Last modified

2024-08-03

Weaknesses

CWE-22

Affected products

• Cab Fare Calculator (Kanev)
• Cab Fare Calculator (Unknown)

References

• https://packetstormsecurity.com/files/166533/
• https://wpscan.com/vulnerability/680121fe-6668-4c1a-a30d-e70dd9be5aac