Authorization Vulnerability in Chauffeur Taxi Booking System for WordPress Allows Unauthorized Access

CVE-2024-32692

8.2HIGH

Key Information

Vendor: Quanticalabs
Status: Chauffeur Taxi Booking System For WordPress
Vendor: CVE Published:; 17 May 2024

Summary

Missing Authorization vulnerability in QuanticaLabs Chauffeur Taxi Booking System for WordPress allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Chauffeur Taxi Booking System for WordPress: from n/a through 6.9.

Affected Version(s)

Chauffeur Taxi Booking System for WordPress <= 6.9

CVSS V3.1

Score:

8.2

Severity:

HIGH

Confidentiality:

None

Integrity:

Low

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published.
May 17, 2024
Vulnerability Reserved.
Apr 17, 2024

Collectors

NVD DatabaseMitre Database

Credit

Kursat Cetin (Patchstack)