CVE-2021-3376: Cuppacms

High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days.

An issue was discovered in Cuppa CMS Versions Before 31 Jan 2021 allows authenticated attackers to gain escalated privileges via a crafted POST request using the user_group_id_field parameter.

Affected products

• Cuppacms Cuppacms: before 31\/jan\/2021 (fixed in 31\/jan\/2021)

Published 2021-12-14. Last modified 2026-06-17.