Vulnerabilities > CVE-2021-3376 - Unspecified vulnerability in Cuppacms 1.0
Attack vector
NETWORK Attack complexity
LOW Privileges required
LOW Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
An issue was discovered in Cuppa CMS Versions Before 31 Jan 2021 allows authenticated attackers to gain escalated privileges via a crafted POST request using the user_group_id_field parameter.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 2 |