Connect-CMS Code Study Plugin Arbitrary Code Execution Vulnerability

A vulnerability allowing arbitrary code execution has been identified in the Code Study Plugin of Connect-CMS. This issue affects authenticated users and is present in the 1.x series versions prior to 1.41.0, as well as in the 2.x series versions prior to 2.41.0. The vulnerability arises from insufficient validation, which could be exploited to execute unintended code on the server.

Impact

Exploitation of this vulnerability could lead to unauthorized code execution on the server, with potential for information disclosure.

Remediation

Users should update to version 1.41.1 or later for the 1.x series, and to version 2.41.1 or later for the 2.x series.