Lucene search
+L

14 matches found

RedhatCVE
RedhatCVE
•added 2026/03/26 3:03 p.m.•14 views

CVE-2026-32277

Connect-CMS is a content management system. In versions 1.35.0 through 1.41.0 and 2.35.0 through 2.41.0, a DOM-based Cross-Site Scripting XSS issue exists in the Cabinet Plugin list view. Versions 1.41.1 and 2.41.1 contain a patch...

8.7CVSS5.8AI score0.0044EPSS
SaveExploits0References1
NVD
NVD
•added 2026/03/23 10:16 p.m.•20 views

CVE-2026-32277

Connect-CMS is a content management system. In versions 1.35.0 through 1.41.0 and 2.35.0 through 2.41.0, a DOM-based Cross-Site Scripting XSS issue exists in the Cabinet Plugin list view. Versions 1.41.1 and 2.41.1 contain a patch...

8.7CVSS0.0044EPSS
SaveExploits0References4
CVE
CVE
•added 2026/03/23 9:22 p.m.•30 views

CVE-2026-32277

Summary: CVE-2026-32277 affects Connect-CMS Cabinet Plugin list view with a DOM-based XSS. Affected versions: 1.x series >= 1.35.0 and = 2.35.0 and

8.7CVSS5.8AI score0.0044EPSS
SaveExploits0References4Affected Software1
attackerkb
attackerkb
•added 2026/03/23 9:22 p.m.•7 views

CVE-2026-32277

Connect-CMS is a content management system. In versions 1.35.0 through 1.41.0 and 2.35.0 through 2.41.0, a DOM-based Cross-Site Scripting XSS issue exists in the Cabinet Plugin list view. Versions 1.41.1 and 2.41.1 contain a patch...

8.7CVSS5.8AI score0.0044EPSS
SaveExploits0References5Affected Software1
OSV
OSV
•added 2026/03/23 9:22 p.m.•15 views

CVE-2026-32277 Connect-CMS has DOM-based Cross-Site Scripting (XSS) in the Cabinet Plugin List View

Connect-CMS is a content management system. In versions 1.35.0 through 1.41.0 and 2.35.0 through 2.41.0, a DOM-based Cross-Site Scripting XSS issue exists in the Cabinet Plugin list view. Versions 1.41.1 and 2.41.1 contain a patch...

8.7CVSS5.8AI score
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/03/23 9:22 p.m.•7 views

CVE-2026-32277 Connect-CMS has DOM-based Cross-Site Scripting (XSS) in the Cabinet Plugin List View

Connect-CMS is a content management system. In versions 1.35.0 through 1.41.0 and 2.35.0 through 2.41.0, a DOM-based Cross-Site Scripting XSS issue exists in the Cabinet Plugin list view. Versions 1.41.1 and 2.41.1 contain a patch...

8.7CVSS5.8AI score0.0044EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/03/23 9:22 p.m.•39 views

CVE-2026-32277 Connect-CMS has DOM-based Cross-Site Scripting (XSS) in the Cabinet Plugin List View

Connect-CMS is a content management system. In versions 1.35.0 through 1.41.0 and 2.35.0 through 2.41.0, a DOM-based Cross-Site Scripting XSS issue exists in the Cabinet Plugin list view. Versions 1.41.1 and 2.41.1 contain a patch...

8.7CVSS0.0044EPSS
SaveExploits0References4
OSV
OSV
•added 2026/03/23 8:35 p.m.•14 views

GHSA-CMFH-MPMF-FMQ4 Connect-CMS has DOM-based Cross-Site Scripting (XSS) in the Cabinet Plugin List View

Security Advisory — Cabinet Plugin DOM-based XSS Summary A DOM-based Cross-Site Scripting XSS issue exists in the Cabinet Plugin list view. Affected Versions - 1.x series: = 1.35.0, = 2.35.0, = 2.41.0 Patched Versions - 1.41.1 - 2.41.1 Description In the Cabinet Plugin list view, DOM-based...

8.7CVSS5.9AI score0.0044EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2026/03/23 8:35 p.m.•22 views

Connect-CMS has DOM-based Cross-Site Scripting (XSS) in the Cabinet Plugin List View

Security Advisory — Cabinet Plugin DOM-based XSS Summary A DOM-based Cross-Site Scripting XSS issue exists in the Cabinet Plugin list view. Affected Versions - 1.x series: = 1.35.0, = 2.35.0, = 2.41.0 Patched Versions - 1.41.1 - 2.41.1 Description In the Cabinet Plugin list view, DOM-based...

8.7CVSS6.2AI score0.0044EPSS
SaveExploits0References6Affected Software1
Snyk
Snyk
•added 2026/03/23 8:35 p.m.•6 views

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS in the rendering process of saved names in the Cabinet Plugin list view. An authenticated user can execute arbitrary scripts in a victim's browser by injecting malicious input, potentially leading to unauthorize...

8.7CVSS5.9AI score0.0044EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/03/23 8:35 p.m.•29 views

EUVD-2026-14568

Connect-CMS has DOM-based Cross-Site Scripting XSS in the Cabinet Plugin List View...

8.7CVSS5.8AI score0.0044EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/03/23 12:00 a.m.•32 views

OpenSource-WorkShop Connect-CMS 跨站脚本漏洞

OpenSource-WorkShop Connect-CMS is a content management system developed by the OpenSource-WorkShop company, designed for easy website creation. Versions 1.35.0 to 1.41.0 and 2.35.0 to 2.41.0 of OpenSource-WorkShop Connect-CMS contain cross-site scripting vulnerabilities. These vulnerabilities st...

8.7CVSS5.6AI score0.0044EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/23 12:00 a.m.•1 views

CVE-2026-32277: Improper Neutralization of Input During Web Page Generation

Connect-CMS is a content management system. In versions 1.35.0 through 1.41.0 and 2.35.0 through 2.41.0, a DOM-based Cross-Site Scripting XSS issue exists in the Cabinet Plugin list view. Versions 1.41.1 and 2.41.1 contain a patch...

8.7CVSS5.7AI score0.0044EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/03/23 12:00 a.m.•25 views

PT-2026-27229

Security Advisory — Cabinet Plugin DOM-based XSS Summary A DOM-based Cross-Site Scripting XSS issue exists in the Cabinet Plugin list view. Affected Versions - 1.x series: = 1.35.0, = 2.35.0, = 2.41.0 Patched Versions - 1.41.1 - 2.41.1 Description In the Cabinet Plugin list view, DOM-based...

8.7CVSS5.9AI score0.0044EPSS
SaveExploits0References10
Rows per page
Query Builder