Skip to content
OpenAdvisories

Package · Packagist

winter/wn-system-module

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.9
    CVE-2026-79773

    Winter CMS before 1.2.13 Local File Inclusion via JavaScript

    Winter CMS before 1.2.13 contains a local file inclusion vulnerability in the JavascriptImporter filter that allows authenticated users with cms.manage_assets permission to disclose arbitrary server-readable files by placing =include or =require directives in…

    wintercms winter winter/wn-system-module Packagist