CVE-2022-27984

CriticalCVSS 9.8

Published: 26/04/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

6.68%

93th percentile - higher than 93% of all known CVEs

Summary

CuppaCMS v1.0 contains a SQL injection vulnerability in the menu_filter parameter at /administrator/templates/default/html/windows/right.php. An attacker can exploit this flaw to manipulate database queries.

Risk Assessment

The risk includes unauthorized access, modification, or deletion of data, potentially compromising the confidentiality and integrity of the system.

Recommendation

Immediately update CuppaCMS to the latest version and implement input filtering and parameterized queries for the menu_filter parameter.

Original NVD description (English source)

CuppaCMS v1.0 was discovered to contain a SQL injection vulnerability via the menu_filter parameter at /administrator/templates/default/html/windows/right.php.