Lucene search
K

13 matches found

RedhatCVE
RedhatCVE
added 2026/03/26 3:3 p.m.2 views

CVE-2026-32277

Connect-CMS is a content management system. In versions 1.35.0 through 1.41.0 and 2.35.0 through 2.41.0, a DOM-based Cross-Site Scripting XSS issue exists in the Cabinet Plugin list view. Versions 1.41.1 and 2.41.1 contain a patch...

8.7CVSS5.8AI score0.00327EPSS
Exploits0References1
NVD
NVD
added 2026/03/23 10:16 p.m.2 views

CVE-2026-32277

Connect-CMS is a content management system. In versions 1.35.0 through 1.41.0 and 2.35.0 through 2.41.0, a DOM-based Cross-Site Scripting XSS issue exists in the Cabinet Plugin list view. Versions 1.41.1 and 2.41.1 contain a patch...

8.7CVSS0.00327EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2026/03/23 9:22 p.m.1 views

CVE-2026-32277

Connect-CMS is a content management system. In versions 1.35.0 through 1.41.0 and 2.35.0 through 2.41.0, a DOM-based Cross-Site Scripting XSS issue exists in the Cabinet Plugin list view. Versions 1.41.1 and 2.41.1 contain a patch...

8.7CVSS5.8AI score0.00327EPSS
Exploits0References5Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/23 9:22 p.m.2 views

CVE-2026-32277 Connect-CMS has DOM-based Cross-Site Scripting (XSS) in the Cabinet Plugin List View

Connect-CMS is a content management system. In versions 1.35.0 through 1.41.0 and 2.35.0 through 2.41.0, a DOM-based Cross-Site Scripting XSS issue exists in the Cabinet Plugin list view. Versions 1.41.1 and 2.41.1 contain a patch...

8.7CVSS5.8AI score0.00327EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/03/23 9:22 p.m.19 views

CVE-2026-32277 Connect-CMS has DOM-based Cross-Site Scripting (XSS) in the Cabinet Plugin List View

Connect-CMS is a content management system. In versions 1.35.0 through 1.41.0 and 2.35.0 through 2.41.0, a DOM-based Cross-Site Scripting XSS issue exists in the Cabinet Plugin list view. Versions 1.41.1 and 2.41.1 contain a patch...

8.7CVSS0.00327EPSS
Exploits0References4
CVE
CVE
added 2026/03/23 9:22 p.m.11 views

CVE-2026-32277

Summary: CVE-2026-32277 affects Connect-CMS Cabinet Plugin list view with a DOM-based XSS. Affected versions: 1.x series >= 1.35.0 and = 2.35.0 and

8.7CVSS5.8AI score0.00327EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2026/03/23 9:22 p.m.3 views

CVE-2026-32277 Connect-CMS has DOM-based Cross-Site Scripting (XSS) in the Cabinet Plugin List View

Connect-CMS is a content management system. In versions 1.35.0 through 1.41.0 and 2.35.0 through 2.41.0, a DOM-based Cross-Site Scripting XSS issue exists in the Cabinet Plugin list view. Versions 1.41.1 and 2.41.1 contain a patch...

8.7CVSS5.8AI score0.00327EPSS
Exploits0References6
Github Security Blog
Github Security Blog
added 2026/03/23 8:35 p.m.9 views

Connect-CMS has DOM-based Cross-Site Scripting (XSS) in the Cabinet Plugin List View

Security Advisory — Cabinet Plugin DOM-based XSS Summary A DOM-based Cross-Site Scripting XSS issue exists in the Cabinet Plugin list view. Affected Versions - 1.x series: = 1.35.0, = 2.35.0, = 2.41.0 Patched Versions - 1.41.1 - 2.41.1 Description In the Cabinet Plugin list view, DOM-based...

8.7CVSS5.9AI score0.00327EPSS
Exploits0References6Affected Software1
EUVD
EUVD
added 2026/03/23 8:35 p.m.5 views

EUVD-2026-14568

Connect-CMS has DOM-based Cross-Site Scripting XSS in the Cabinet Plugin List View...

8.7CVSS5.8AI score0.00327EPSS
Exploits0References4
OSV
OSV
added 2026/03/23 8:35 p.m.3 views

GHSA-CMFH-MPMF-FMQ4 Connect-CMS has DOM-based Cross-Site Scripting (XSS) in the Cabinet Plugin List View

Security Advisory — Cabinet Plugin DOM-based XSS Summary A DOM-based Cross-Site Scripting XSS issue exists in the Cabinet Plugin list view. Affected Versions - 1.x series: = 1.35.0, = 2.35.0, = 2.41.0 Patched Versions - 1.41.1 - 2.41.1 Description In the Cabinet Plugin list view, DOM-based...

8.7CVSS5.9AI score0.00327EPSS
Exploits0References6
Snyk
Snyk
added 2026/03/23 8:35 p.m.1 views

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS in the rendering process of saved names in the Cabinet Plugin list view. An authenticated user can execute arbitrary scripts in a victim's browser by injecting malicious input, potentially leading to unauthorize...

8.7CVSS5.9AI score0.00327EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/03/23 12:0 a.m.2 views

PT-2026-27229

Security Advisory — Cabinet Plugin DOM-based XSS Summary A DOM-based Cross-Site Scripting XSS issue exists in the Cabinet Plugin list view. Affected Versions - 1.x series: = 1.35.0, = 2.35.0, = 2.41.0 Patched Versions - 1.41.1 - 2.41.1 Description In the Cabinet Plugin list view, DOM-based...

8.7CVSS5.9AI score0.00327EPSS
Exploits0References10
CNNVD
CNNVD
added 2026/03/23 12:0 a.m.6 views

OpenSource-WorkShop Connect-CMS 跨站脚本漏洞

OpenSource-WorkShop Connect-CMS is a content management system developed by the OpenSource-WorkShop company, designed for easy website creation. Versions 1.35.0 to 1.41.0 and 2.35.0 to 2.41.0 of OpenSource-WorkShop Connect-CMS contain cross-site scripting vulnerabilities. These vulnerabilities st...

8.7CVSS5.6AI score0.00327EPSS
Exploits0References4
Rows per page
Query Builder