Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
opensource-workshop/connect-cms
Composer
· Package
9 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Connect CMS: Improper Authorization in the My Page Profile Update Feature Allows Modification of Arbitrary User Information
CVE-2026-32300 · GHSA-QR6X-WVXR-8HM9
opensource-workshop/connect-cms
Composer
High
Fix reported
2026-03-26
Connect-CMS has DOM-based Cross-Site Scripting (XSS) in the Cabinet Plugin List View
CVE-2026-32277 · GHSA-CMFH-MPMF-FMQ4
opensource-workshop/connect-cms
Composer
High
Fix reported
2026-03-26
Connect CMS: Information Disclosure Due to Improper Authorization through the Page Content Retrieval Feature
CVE-2026-32299 · GHSA-62CH-J6X7-722J
opensource-workshop/connect-cms
Composer
High
Fix reported
2026-03-26
Connect CMS has Stored Cross-site Scripting (XSS) in the File Field of its Form Plugin
CVE-2026-32278 · GHSA-MV3P-7P89-WQ9P
opensource-workshop/connect-cms
Composer
High
Fix reported
2026-03-26
Connect CMS has SSRF in the External Page Migration Feature of its Page Management Plugin
CVE-2026-32279 · GHSA-JH46-85JR-6PH9
opensource-workshop/connect-cms
Composer
Medium
Fix reported
2026-03-26
Connect-CMS has Arbitrary Code Execution by an Authenticated User in its Code Study Plugin
CVE-2026-32276 · GHSA-HXQW-6QV7-CQFV
opensource-workshop/connect-cms
Composer
High
Fix reported
2026-03-26
Connect-CMS Access control vulnerability
GHSA-5RJC-JC28-CWGG
opensource-workshop/connect-cms
Composer
Medium
Fix reported
2025-02-08
Connect-CMS information that is restricted to viewing is visible
GHSA-2237-5R9W-VM8J
opensource-workshop/connect-cms
Composer
High
Fix reported
2025-02-08
Connect-CMS Privilege Escalation Vulnerability
GHSA-QXH3-JGVH-X55J
opensource-workshop/connect-cms
Composer
Medium
Fix reported
2025-02-07
