CVE-2021-3376

PoC —

CVSS 3.1

8.8 high

EPSS

1%p64

Published

Dec 14, 2021 (Dec 14, 2021)

Modified

Jun 17, 2026

Description

An issue was discovered in Cuppa CMS Versions Before 31 Jan 2021 allows authenticated attackers to gain escalated privileges via a crafted POST request using the user_group_id_field parameter.

Vendors: cuppacms
Products: cuppacms
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news0 stories

No ingested article mentions this CVE yet.