high8.8
CVE-2021-3376
An issue was discovered in Cuppa CMS Versions Before 31 Jan 2021 allows authenticated attackers to gain escalated privileges via a crafted POST request using t…
Impact
An issue was discovered in Cuppa CMS Versions Before 31 Jan 2021 allows authenticated attackers to gain escalated privileges via a crafted POST request using the user_group_id_field parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cuppacms | Cuppacms | before 31\/jan\/2021 |