cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score
CVE-2022-3556,https://securityvulnerability.io/vulnerability/CVE-2022-3556,Stored Cross-Site Scripting Vulnerability in Cab Fare Calculator Plugin,"The Cab Fare Calculator plugin for WordPress contains a vulnerability allowing for Stored Cross-Site Scripting due to inadequate input sanitization and output escaping within the vehicle title setting. This vulnerability permits authenticated attackers with admin rights to inject arbitrary web scripts, which may execute when any user accesses the compromised page. The issue primarily affects installations operating in a multi-site environment, particularly those where the 'unfiltered_html' capability is disabled, presenting a significant risk to user data and site integrity.",Wordpress,Cab Fare Calculator,4.8,MEDIUM,0.00044999999227002263,false,,false,false,false,,false,false,2024-09-05T11:00:14.179Z,0
CVE-2022-1391,https://securityvulnerability.io/vulnerability/CVE-2022-1391,Cab fare calculator < 1.0.4 - Unauthenticated LFI,"The Cab fare calculator WordPress plugin before 1.0.4 does not validate the controller parameter before using it in require statements, which could lead to Local File Inclusion issues.",Wordpress,Cab Fare Calculator,9.8,CRITICAL,0.13686999678611755,false,,false,false,false,,false,false,2022-04-25T15:51:26.000Z,0