WordPress Chauffeur Taxi Booking System for WordPress plugin <= 7.2 - Arbitrary File Upload vulnerability

CVE-2024-31115

Summary

The Chauffeur Taxi Booking System for WordPress by QuanticaLabs is susceptible to an unrestricted file upload vulnerability. This security flaw allows attackers to upload files with potentially dangerous types, which may lead to unauthorized access or code execution on the server. The vulnerability affects versions of the plugin ranging from n/a to 7.2, posing a significant risk to users who rely on this system for their taxi booking needs. Proper measures and patching should be taken to mitigate this risk and secure the web application.

References