high8.8
CVE-2022-37190
CuppaCMS 1.0 is vulnerable to Remote Code Execution (RCE).
Impact
CuppaCMS 1.0 is vulnerable to Remote Code Execution (RCE). An authenticated user can control both parameters (action and function) from "/api/index.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cuppacms | Cuppacms | Version 1.0 |