CVE-2022-24265

Cuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /administrator/components/menu/ via the path=component/menu/&menu_filter=3 parameter.

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2022-01-31

Last modified

2024-08-03

Weaknesses

CWE-89

Affected products

• Cuppacms (Cuppacms)

References

• https://github.com/CuppaCMS/CuppaCMS/issues/14
• https://github.com/truonghuuphuc/CVE