Read the docs

kanev

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

kanev records in CISA KEV

No kanev vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Cab Fare Calculator 2 records MEDIUM

Records

2 records

TI-2022-01272 CVE-2022-1391 · GHSA-ccvg-rxc2-rf77

Cab fare calculator < 1.0.4 - Unauthenticated LFI

Priority MEDIUM 58

The Cab fare calculator WordPress plugin before 1.0.4 does not validate the controller parameter before using it in require statements, which could lead to Local File Inclusion issues.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.15064 Published 2022-04-25 Fixed in 1.0.4 CWE-22
TI-2022-03273 CVE-2022-3556 · GHSA-3225-4cfr-jmrx

Cab fare calculator <= 1.1.6 - Authenticated (Admin+) Stored Cross-Site Scripting

Priority LOW 24

The Cab fare calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the vehicle title setting in versions up to, and including, 1.1.6 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00318 Published 2024-09-05 No fix listed CWE-79
Open these records in search →