CVE-2022-38295: Cuppacms

Medium severity, CVSS 6.1. EPSS: 1.4% chance of exploitation in the next 30 days.

Cuppa CMS v1.0 was discovered to contain a cross-site scripting vulnerability at /table_manager/view/cu_user_groups. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field under the Add New Group function.

Affected products

Published 2022-09-12. Last modified 2026-06-17.