Vulnerability Details CVE-2023-39681
Cuppa CMS v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the email_outgoing parameter at /Configuration.php. This vulnerability is triggered via a crafted payload.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.044
EPSS Ranking 88.5%
CVSS Severity
CVSS v3 Score 9.8
Products affected by CVE-2023-39681
-
cpe:2.3:a:cuppacms:cuppacms:1.0