Cuppa CMS v1.0 was discovered to contain an arbitrary file deletion vulnerability via the unlink() function.

Published Feb 10, 2022 · Updated Aug 3, 2024 · Assigned by mitre