Skip to content
OpenAdvisories

Package · Packagist

wintercms/winter

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.2
    CVE-2024-29686

    Winter CMS Server-Side Template Injection (SSTI) vulnerability

    Server-side Template Injection (SSTI) vulnerability in Winter CMS v.1.2.3 allows a remote attacker to execute arbitrary code via a crafted payload to the CMS Pages field and Plugin components. NOTE: the vendor disputes this because the payload could only be e…

    wintercms/winter Packagist
  • High 8.1
    CVE-2022-39357

    Winter vulnerable to Prototype Pollution in Snowboard framework

    Winter is a free, open-source content management system based on the Laravel PHP framework. The Snowboard framework in versions 1.1.8, 1.1.9, and 1.2.0 is vulnerable to prototype pollution in the main Snowboard class as well as its plugin loader. The 1.0 bran…

    wintercms winter wintercms/winter Packagist