Skip to content
Threat Feed

Tag

Cabinet-Plugin

1 brief RSS
high advisory

Connect-CMS Cabinet Plugin DOM-based XSS Vulnerability

A DOM-based Cross-Site Scripting (XSS) vulnerability exists in the Cabinet Plugin list view of Connect-CMS, affecting versions 1.35.0 to 1.41.0 and 2.35.0 to 2.41.0, which can lead to arbitrary script execution in the victim's browser.

xss connect-cms cabinet-plugin
2r 1t