Marian Kanev Cab fare calculator
cpe:2.3:a:kanev:cab_fare_calculator:*:*:*:*:wordpress:*:*
- <= 1.1
A missing authorization vulnerability in the WordPress Fare Calculator plugin, specifically in versions through 1.1, allows for stored cross-site scripting (XSS) attacks. This vulnerability arises from cross-site request forgery (CSRF) conditions, enabling malicious actors to exploit higher-privileged users into performing unintended actions.
Exploitation of this vulnerability could lead to stored cross-site scripting, where injected scripts are executed in the context of the user.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.