CVE-2022-38295
published 2022-09-12CVE-2022-38295: Cuppa CMS v1.0 was discovered to contain a cross-site scripting vulnerability at /table_manager/view/cu_user_groups. This vulnerability allows attackers to…
PriorityP432medium6.1CVSS 3.1
AVNACLPRNUIRSCCLILAN
EXPLOIT
EPSS
1.05%
59.9th percentile
Cuppa CMS v1.0 was discovered to contain a cross-site scripting vulnerability at /table_manager/view/cu_user_groups. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field under the Add New Group function.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cuppacms | cuppacms | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Nuclei
Cuppa CMS v1.0 - Cross Site Scripting
nuclei·CVSS 6.1
CVE-2022-38295 [MEDIUM] Cuppa CMS v1.0 - Cross Site Scripting
Cuppa CMS v1.0 - Cross Site Scripting
Cuppa CMS v1.0 was discovered to contain a cross-site scripting vulnerability at /table_manager/view/cu_user_groups. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field under the Add New Group function.
Template:
id: CVE-2022-38295
info:
name: Cuppa CMS v1.0 - Cross Site Scripting
author: theamanrawat
severity: medium
description: |
Cuppa CMS v1.0 was discovered to contain a cross-site scripting vulnerability at /table_manager/view/cu_user_groups. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field under the Add New Group function.
impact: |
Successful exploitation of this vulnerability could allow
No writeups or analysis indexed.
2022-09-12
Published