Skip to content
OpenAdvisories

Package · Packagist

wintercms/winter

4 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium —

    Bypass of CMS Safe Mode Security Feature

    ### Impact Authenticated users with permissions to create or modify theme template objects through the backend "CMS" editor can exploit this vulnerability to bypass the `cms.enableSafeMode` security feature if enabled (disables modification of PHP code throug…