Skip to content
Threat Feed
Subscribe

Vendor

Connect

1 brief RSS
high advisory

Connect CMS Form Plugin Stored XSS Vulnerability

A stored cross-site scripting (XSS) vulnerability exists in the file field of the Form Plugin in Connect CMS versions 1.x series <= 1.41.0 and 2.x series <= 2.41.0, allowing arbitrary script execution in an administrator's browser, potentially leading to unauthorized actions or information theft.

Connect CMS +1 connect-cms stored-xss vulnerability form-plugin
2r