A vulnerability in Connect-CMS allows authenticated users to achieve remote code execution, posing a severe risk to system integrity and confidentiality.

This is a code injection vulnerability (CWE-94) within the Code Study Plugin. An authenticated user with sufficient privileges can leverage this flaw to execute arbitrary system code.

Successful exploitation of this vulnerability allows an attacker to execute arbitrary code on the underlying server, potentially leading to full system compromise. With a CVSS score of 8.8, this represents a high-severity risk that could result in unauthorized data access, modification of content, or complete system takeover, causing significant reputational and operational damage.

Immediate Action: Update Connect-CMS to version 1.41.1 or 2.41.1 immediately to incorporate the provided security patches.

Proactive Monitoring: Review web server and application logs for suspicious activity originating from authenticated user accounts, specifically focusing on requests directed toward the Code Study Plugin.

Compensating Controls: Implement strict Web Application Firewall (WAF) rules to filter and block malicious code patterns in requests destined for the CMS application.

Public Exploit Available: Unknown

Given the high CVSS score and the potential for total system compromise, organizations should prioritize patching this vulnerability immediately. Ensure all instances of Connect-CMS are updated to the corrected versions (1.41.1 or 2.41.1) and audit existing user accounts to ensure that only authorized personnel have access to sensitive plugins.