CVE-2022-37190
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
30Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 46%
CuppaCMS 1.0 is vulnerable to Remote Code Execution (RCE). An authenticated user can control both parameters (action and function) from "/api/index.php.
Affected products
n/a · n/a