CVE-2022-1391

CVE-2022-1391 affects the WordPress Cab fare calculator plugin prior to version 1.0.4. The root cause is lack of validation of the controller parameter before it is used in PHP require statements, enabling local file inclusion (LFI) conditions. Practical impact per the sources is the potential to...

CVE-2022-3556

CVE-2022-3556 affects the WordPress plugin Cab fare calculator up to version 1.1.6. The vulnerability is a Stored Cross-Site Scripting (XSS) via the vehicle title setting caused by insufficient input sanitization and output escaping. Exploitation requires authenticated access with administrator p...