CVE-2022-25401: Cuppacms

High severity, CVSS 7.5. EPSS: 2.3% chance of exploitation in the next 30 days.

The copy function of the file manager in Cuppa CMS v1.0 allows any file to be copied to the current directory, granting attackers read access to arbitrary files.

Affected products

• Cuppacms Cuppacms: version 1.0 only

Published 2022-02-24. Last modified 2026-06-17.