Skip to content
OpenAdvisories

Package · Packagist

winter/wn-cms-module

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.5
    CVE-2024-54149

    Winter CMS Modules allows a sandbox bypass in Twig templates leading to data modification and deletion

    Winter is a free, open-source content management system (CMS) based on the Laravel PHP framework. Winter CMS prior to versions 1.2.7, 1.1.11, and 1.0.476 allow users with access to the CMS templates sections that modify Twig files to bypass the sandbox placed…

    wintercms winter winter/wn-cms-module Packagist