CVE-2022-1391observed exploitationCWE-22

CVE-2022-1391: vulnerability in Cab fare calculator

Cab fare calculator < 1.0.4 - Unauthenticated LFI

Published · Updated

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

45Vexday Risk Score

Patch now. It exploitation observed by VulnCheck and has a working public exploit.

ssvc Actepss 15%
from disclosure to weapon
Published on NVDApr 25
VulnCheck+1141d
The Cab fare calculator WordPress plugin before 1.0.4 does not validate the controller parameter before using it in require statements, which could lead to Local File Inclusion issues.