← Database

CVE-2022-25495

CRITICAL CVSS: 9.8 Published: 2022-03-15 Modified: 2026-06-17

Description

The component /jquery_file_upload/server/php/index.php of CuppaCMS v1.0 allows attackers to upload arbitrary files and execute arbitrary code via a crafted PHP file.

Affected Platforms

Cuppacms Cuppacms

Weakness Type

CWE-434

References