Skip to content
OpenAdvisories

Package · Packagist

winter/wn-system-module

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.0
    CVE-2023-52083

    Stored XSS through privileged upload of Media Manager file followed by renaming

    Winter is a free, open-source content management system. Prior to 1.2.4, users with the `media.manage_media` permission can upload files to the Media Manager and rename them after uploading. Previously, media manager files were only sanitized on upload, not o…

    wintercms winter winter/wn-system-module Packagist