Skip to content
OpenAdvisories

Package · Packagist

winter/wn-system-module

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.4
    CVE-2026-79774

    Winter CMS before 1.2.13 Twig Sandbox Escape via SecurityPolicy

    Winter CMS versions before 1.2.13 contain an incomplete fix for a Twig sandbox escape vulnerability in System\\Twig\\SecurityPolicy that allows authenticated backend users with template-editing permissions to bypass sandbox restrictions. Attackers can exploit…

    wintercms winter winter/wn-system-module Packagist