CVE-2022-1391
Assigner: WPScan
Published: 2022-04-25T15:51:26
State: PUBLISHED
affected: product: Cab fare calculator
vendor: Unknown
versions: lessThan: 1.0.4
status: affected
version: 1.0.4
versionType: custom
credits: value: Hassan Khan Yusufzai - Splint3r7
descriptions: value: The Cab fare calculator WordPress plugin before 1.0.4 does not validate the controller parameter before using it in require statements, which could lead to Local File Inclusion issues.
problemTypes: descriptions: cweId: CWE-22
description: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
type: CWE
source: discovery: EXTERNAL
title: Cab fare calculator < 1.0.4 - Unauthenticated LFI
x_generator: WPScan CVE Generator