What’s Vulnerable › Products

opensource-workshop connect-cms vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your opensource-workshop connect-cms version is affected

Latest opensource-workshop connect-cms vulnerabilities

• CVE-2026-32300 — Connect CMS: Improper Authorization in the My Page Profile Update Feature Allows Modification of Arbitrary User Information (CVSS 8.1)
• CVE-2026-32299 — Connect CMS: Information Disclosure Due to Improper Authorization through the Page Content Retrieval Feature (CVSS 7.5)
• CVE-2026-32279 — Connect CMS has SSRF in the External Page Migration Feature of its Page Management Plugin (CVSS 6.8)
• CVE-2026-32278 — Connect CMS has Stored Cross-site Scripting (XSS) in the File Field of its Form Plugin (CVSS 4.8)
• CVE-2026-32277 — Connect-CMS has DOM-based Cross-Site Scripting (XSS) in the Cabinet Plugin List View (CVSS 8.7)
• CVE-2026-32276 — Connect-CMS has Arbitrary Code Execution by an Authenticated User in its Code Study Plugin (CVSS 8.8)