opensource-workshop connect-cms vulnerabilities
6 published CVEs name opensource-workshop connect-cms among the affected products.
- 6Published CVEs6 of them scored
- 6Last 12 monthspublished in the last year
- 0Critical5 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-32300
Connect CMS: Improper Authorization in the My Page Profile Update Feature Allows Modification of Arbitrary User Information
opensource-workshop · connect-cms
High8.1 - CVE-2026-32299
Connect CMS: Information Disclosure Due to Improper Authorization through the Page Content Retrieval Feature
opensource-workshop · connect-cms
High7.5 - CVE-2026-32279
Connect CMS has SSRF in the External Page Migration Feature of its Page Management Plugin
opensource-workshop · connect-cms
Medium6.8 - CVE-2026-32278
Connect CMS has Stored Cross-site Scripting (XSS) in the File Field of its Form Plugin
opensource-workshop · connect-cms
High8.2 - CVE-2026-32277
Connect-CMS has DOM-based Cross-Site Scripting (XSS) in the Cabinet Plugin List View
opensource-workshop · connect-cms
High8.7 - CVE-2026-32276
Connect-CMS has Arbitrary Code Execution by an Authenticated User in its Code Study Plugin
opensource-workshop · connect-cms
High8.8