← Database

CVE-2022-37190

HIGH CVSS: 8.8 Published: 2022-09-13 Modified: 2026-06-17

Description

CuppaCMS 1.0 is vulnerable to Remote Code Execution (RCE). An authenticated user can control both parameters (action and function) from "/api/index.php.

Affected Platforms

Cuppacms Cuppacms

Weakness Type

NVD-CWE-Other

References