CVE-2022-1391 Cab fare calculator < 1.0.4 - Unauthenticated LFI

2022-04-2515:51:26

CWE-22

WPScan

www.cve.org

9.6 High

AI Score

Confidence

High

0.03 Low

EPSS

Percentile

91.0%

JSON

The Cab fare calculator WordPress plugin before 1.0.4 does not validate the controller parameter before using it in require statements, which could lead to Local File Inclusion issues.

CNA Affected

[
  {
    "product": "Cab fare calculator",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "1.0.4",
        "status": "affected",
        "version": "1.0.4",
        "versionType": "custom"
      }
    ]
  }
]