Cuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /administrator/components/menu/ via the path=component/menu/&menu_filter=3 parameter.Referenceshttps://github.com/truonghuuphuc/CVEhttps://github.com/CuppaCMS/CuppaCMS/issues/14