opensource-workshop/connect-cms vulnerabilities (Packagist)
9 vulnerabilities.
-
opensource-workshop/connect-cmsPackagist Connect CMS: Improper Authorization in the My Page Profile Update Feature Allows Modification of Arbitrary User Information 8.1 High -
opensource-workshop/connect-cmsPackagist Connect CMS: Information Disclosure Due to Improper Authorization through the Page Content Retrieval Feature 7.5 High -
opensource-workshop/connect-cmsPackagist Connect CMS has SSRF in the External Page Migration Feature of its Page Management Plugin 6.8 Medium -
opensource-workshop/connect-cmsPackagist Connect CMS has Stored Cross-site Scripting (XSS) in the File Field of its Form Plugin 8.2 High -
opensource-workshop/connect-cmsPackagist Connect-CMS has DOM-based Cross-Site Scripting (XSS) in the Cabinet Plugin List View 8.7 High -
opensource-workshop/connect-cmsPackagist Connect-CMS has Arbitrary Code Execution by an Authenticated User in its Code Study Plugin 8.8 High -
opensource-workshop/connect-cmsPackagist Connect-CMS information that is restricted to viewing is visible 8.7 High -
opensource-workshop/connect-cmsPackagist Connect-CMS Access control vulnerability 4.3 Medium -
opensource-workshop/connect-cmsPackagist Connect-CMS Privilege Escalation Vulnerability 4.3 Medium