HIGHPackagist
GHSA-2237-5r9w-vm8jConnect-CMS information that is restricted to viewing is visible
Modified: 2/7/2025
package
Packagist/opensource-workshop/connect-cms
pkg:packagist/opensource-workshop/connect-cms
MEDIUM4.3Packagist
GHSA-5rjc-jc28-cwggConnect-CMS Access control vulnerability
Modified: 2/7/2025
HIGH7.5Packagist
GHSA-62ch-j6x7-722j· CVE-2026-32299Connect CMS: Information Disclosure Due to Improper Authorization through the Page Content Retrieval Feature
Modified: 3/25/2026
HIGH8.7Packagist
GHSA-cmfh-mpmf-fmq4· CVE-2026-32277Connect-CMS has DOM-based Cross-Site Scripting (XSS) in the Cabinet Plugin List View
Modified: 3/25/2026
HIGH8.8Packagist
GHSA-hxqw-6qv7-cqfv· CVE-2026-32276Connect-CMS has Arbitrary Code Execution by an Authenticated User in its Code Study Plugin
Modified: 3/25/2026
MEDIUM6.8Packagist
GHSA-jh46-85jr-6ph9· CVE-2026-32279Connect CMS has SSRF in the External Page Migration Feature of its Page Management Plugin
Modified: 3/25/2026
HIGH8.2Packagist
GHSA-mv3p-7p89-wq9p· CVE-2026-32278Connect CMS has Stored Cross-site Scripting (XSS) in the File Field of its Form Plugin
Modified: 3/25/2026
HIGH8.1Packagist
GHSA-qr6x-wvxr-8hm9· CVE-2026-32300Connect CMS: Improper Authorization in the My Page Profile Update Feature Allows Modification of Arbitrary User Information
Modified: 3/25/2026
MEDIUM4.3Packagist
GHSA-qxh3-jgvh-x55jConnect-CMS Privilege Escalation Vulnerability
Modified: 2/7/2025