Opensource-workshop vulnerabilities
We track 4 vulnerabilities in Opensource-workshop products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on March 23, 2026.
Latest Opensource-workshop vulnerabilities
- 8.1 High severity
connect-cms: Improper Authorization
Connect-CMS is a content management system. In versions on the 1.x series up to and including 1.41.0 and versions on the 2.x series up to and including 2.41.0, an improper authorization issue in the My Page profile update feature may allow modification of arbi
- 7.5 High severity
connect-cms: Improper Access Control
Connect-CMS is a content management system. In versions on the 1.x series up to and including 1.41.0 and versions on the 2.x series up to and including 2.41.0, an improper authorization issue in the page content retrieval feature may allow retrieval of non-pub
- 8.7 High severity
connect-cms: Improper Neutralization of Input During Web Page Generation
Connect-CMS is a content management system. In versions 1.35.0 through 1.41.0 and 2.35.0 through 2.41.0, a DOM-based Cross-Site Scripting (XSS) issue exists in the Cabinet Plugin list view. Versions 1.41.1 and 2.41.1 contain a patch.
- 8.8 High severity
connect-cms: Improper Control of Generation of Code
Connect-CMS is a content management system. In versions on the 1.x series up to and including 1.41.0 and versions on the 2.x series up to and including 2.41.0, an authenticated user may be able to execute arbitrary code in the Code Study Plugin. Versions 1.41.