critical9.8
CVE-2023-39681
Cuppa CMS v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the email_outgoing parameter at /Configuration.php.
Impact
Cuppa CMS v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the email_outgoing parameter at /Configuration.php. This vulnerability is triggered via a crafted payload.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cuppacms | Cuppacms | Version 1.0 |