CVE-2022-27984

Critical · CVSS 9.8

CuppaCMS — SQL Injection

CVSS: 9.8; nvd
EPSS: —
KEV: No
Class: other; CWE-89

Description

CuppaCMS v1.0 was discovered to contain a SQL injection vulnerability via the menu_filter parameter at /administrator/templates/default/html/windows/right.php.

Search profile — drives PoC discovery

Symbols menu_filterright.php/administrator/templates/default/html/windows/right.php

Keywords CVE-2022-27984CuppaCMSSQL injectionmenu_filterright.phpCuppaCMS v1.0 SQLiCuppaCMS administrator templates

Versions: v1.0

Ranked PoCs (1) — best first

Heuristic ranking — not yet expert-vetted. Scored on structure + provenance, not execution.

CuppaCMS/CuppaCMS candidate

cited in references

trickest

★ 0

Recall-favoring discovery; ranking by the Stage-4 scorer (Adam's rubric). Scanner/aggregator repos are hidden.

References

https://github.com/CuppaCMS/CuppaCMS/issues/30
https://www.cuppacms.com/
http://cuppa.com
https://github.com/CuppaCMS/CuppaCMS/issues/30

Status: enriched · ingested 2026-07-05T06:00:39.000Z · profiled 2026-07-05T06:30:39.000Z