TI-2026-24806 CVE-2026-32277 · GHSA-cmfh-mpmf-fmq4
Connect-CMS has DOM-based Cross-Site Scripting (XSS) in the Cabinet Plugin List View
Priority MEDIUM 40
Connect-CMS is a content management system.
opensource-workshop
Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9
Exploited now
opensource-workshop records in CISA KEVNo opensource-workshop vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
6 records in Connect-cms · all components
TI-2026-24805 CVE-2026-32276 · GHSA-hxqw-6qv7-cqfv
Connect-CMS has Arbitrary Code Execution by an Authenticated User in its Code Study Plugin
Priority MEDIUM 40
Connect-CMS is a content management system.
TI-2026-24828 CVE-2026-32299 · GHSA-62ch-j6x7-722j
Connect CMS: Information Disclosure Due to Improper Authorization through the Page Content Retrieval Feature
Priority LOW 39
Connect-CMS is a content management system.
TI-2026-24829 CVE-2026-32300 · GHSA-qr6x-wvxr-8hm9
Improper authorization in opensource-workshop connect-cms
Priority LOW 37
Connect-CMS is a content management system.
TI-2026-24807 CVE-2026-32278 · GHSA-mv3p-7p89-wq9p
Connect CMS has Stored Cross-site Scripting (XSS) in the File Field of its Form Plugin
Priority LOW 37
Connect-CMS is a content management system.
TI-2026-24808 CVE-2026-32279 · GHSA-jh46-85jr-6ph9
Connect CMS has SSRF in the External Page Migration Feature of its Page Management Plugin
Priority LOW 30
Connect-CMS is a content management system.