Composer opensource-workshop/connect-cms has 9 known advisories in the phpwarden feed. Feed 2026.10.29.1, updated 2026-10-28.
| CVE | Title | Severity | CVSS | Affected | Fixed in |
|---|---|---|---|---|---|
| CVE-2026-32276 | Connect-CMS has Arbitrary Code Execution by an Authenticated User in its Code Study Plugin | high | 8.8 | <1.41.1 or >=2.0.0 and <2.41.1 | 1.41.1, 2.41.1 |
| CVE-2026-32279 | Connect CMS has SSRF in the External Page Migration Feature of its Page Management Plugin | medium | 6.8 | <1.41.1 or >=2.0.0 and <2.41.1 | 1.41.1, 2.41.1 |
| CVE-2026-32277 | Connect-CMS has DOM-based Cross-Site Scripting (XSS) in the Cabinet Plugin List View | high | 8.7 | >=1.35.0 and <1.41.1 or >=2.35.0 and <2.41.1 | 1.41.1, 2.41.1 |
| CVE-2026-32300 | Connect CMS: Improper Authorization in the My Page Profile Update Feature Allows Modification of Arbitrary User Information | high | 8.1 | <1.41.1 or >=2.0.0 and <2.41.1 | 1.41.1, 2.41.1 |
| CVE-2026-32299 | Connect CMS: Information Disclosure Due to Improper Authorization through the Page Content Retrieval Feature | high | 7.5 | <1.41.1 or >=2.0.0 and <2.41.1 | 1.41.1, 2.41.1 |
| CVE-2026-32278 | Connect CMS has Stored Cross-site Scripting (XSS) in the File Field of its Form Plugin | high | 8.2 | <1.41.1 or >=2.0.0 and <2.41.1 | 1.41.1, 2.41.1 |
| GHSA-5rjc-jc28-cwgg | Connect-CMS Access control vulnerability | medium | 4.3 | <1.8.7 or >=2.0.0 and <2.4.7 | 1.8.7, 2.4.7 |
| GHSA-qxh3-jgvh-x55j | Connect-CMS Privilege Escalation Vulnerability | medium | 4.3 | <1.7.2 or >=2.0.0 and <2.3.2 | 1.7.2, 2.3.2 |
| GHSA-2237-5r9w-vm8j | Connect-CMS information that is restricted to viewing is visible | high | 0.0 | <1.8.4 | 1.8.4 |
Find out in one command. phpwarden checks your composer.lock against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.
# one-time install pip install phpwarden # then phpwarden deps composer.lock
Or keep it checked automatically: GitHub Action · pre-commit hook · GitLab CI · Laravel artisan command
Install docs How findings are ranked