CVE-2022-38295

Cuppa CMS v1.0 was discovered to contain a cross-site scripting vulnerability at /tablemanager/view/cuusergroups. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field under the Add New Group function...

CVE-2022-38295

Cuppa CMS v1.0 was discovered to contain a cross-site scripting vulnerability at /tablemanager/view/cuusergroups. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field under the Add New Group function...

PT-2018-13977

Name of the Vulnerable Software and Affected Versions CuppaCMS versions prior to 2018-09-03 Description A stored XSS issue exists, allowing exploitation via the section name in the administrator//component/table manager/view/cu menus section. Recommendations For versions prior to 2018-09-03, upda...