CVE-2026-103351: Improper Validation of Specified Quantity in Input in Magepeople inc. Taxi Booking Manager for WooCommerce

This vulnerability in the Taxi Booking Manager for WooCommerce plugin by Magepeople inc. allows an attacker to manipulate input data due to improper validation of the specified quantity field. The affected versions include all releases from the initial version up to but not including 2.1.2. The CVSS 3.1 score is 5.3 (medium), with network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, limited integrity impact, and no availability impact.

The vulnerability allows an attacker to manipulate input data related to quantity specification, potentially leading to integrity issues within the affected system. There is no impact on confidentiality or availability reported. This could affect the correctness of booking data or related processes within the plugin.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official patch or fix information is provided in the available data. Users should monitor Magepeople inc.'s advisories for updates and apply any official fixes once available.