High
CVSS 8.8
Overview
An issue was discovered in Cuppa CMS Versions Before 31 Jan 2021 allows authenticated attackers to gain escalated privileges via a crafted POST request using the user_group_id_field parameter.
An issue was discovered in Cuppa CMS Versions Before 31 Jan 2021 allows authenti...
An issue was discovered in Cuppa CMS Versions Before 31 Jan 2021 allows authenticated attackers to gain escalated privileges via a crafted POST request using the user_group_id_field parameter.
This vulnerability is rated 🟠 HIGH.
Recommended actions: