Vulnerability Details CVE-2022-1391
The Cab fare calculator WordPress plugin before 1.0.4 does not validate the controller parameter before using it in require statements, which could lead to Local File Inclusion issues.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.667
EPSS Ranking 98.4%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
References
Products affected by CVE-2022-1391
-
cpe:2.3:a:kanev:cab_fare_calculator:-
-
cpe:2.3:a:kanev:cab_fare_calculator:1.0.3