CVE-2022-38295

2022-09-1220:43:50

mitre

www.cve.org

cuppa cms

cross-site scripting

vulnerability

web scripts

html

name field

add new group

0.002 Low

EPSS

Percentile

59.3%

JSON

Cuppa CMS v1.0 was discovered to contain a cross-site scripting vulnerability at /table_manager/view/cu_user_groups. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field under the Add New Group function.

References

github.com/CuppaCMS/CuppaCMS/issues/34

0.002 Low

EPSS

Percentile

59.3%

JSON

Related for CVELIST:CVE-2022-38295