opensource-workshop/connect-cms Security Advisories | GitStock

high2026-03-23

Connect CMS: Improper Authorization in the My Page Profile Update Feature Allows Modification of Arbitrary User Information

GHSA-qr6x-wvxr-8hm9 · CVE-2026-32300

high2026-03-23

Connect CMS: Information Disclosure Due to Improper Authorization through the Page Content Retrieval Feature

GHSA-62ch-j6x7-722j · CVE-2026-32299

medium2026-03-23

Connect CMS has SSRF in the External Page Migration Feature of its Page Management Plugin

GHSA-jh46-85jr-6ph9 · CVE-2026-32279

high2026-03-23

Connect CMS has Stored Cross-site Scripting (XSS) in the File Field of its Form Plugin

GHSA-mv3p-7p89-wq9p · CVE-2026-32278

high2026-03-23

Connect-CMS has DOM-based Cross-Site Scripting (XSS) in the Cabinet Plugin List View

GHSA-cmfh-mpmf-fmq4 · CVE-2026-32277

high2026-03-23

Connect-CMS has Arbitrary Code Execution by an Authenticated User in its Code Study Plugin

GHSA-hxqw-6qv7-cqfv · CVE-2026-32276

high2025-02-07

Connect-CMS information that is restricted to viewing is visible

GHSA-2237-5r9w-vm8j

medium2025-02-07

Connect-CMS Access control vulnerability

GHSA-5rjc-jc28-cwgg

medium2023-07-05

Connect-CMS Privilege Escalation Vulnerability

GHSA-qxh3-jgvh-x55j