Security: wintercms/winter
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
Stored XSS through privileged upload of Media Manager file followed by renamingGHSA-4wvw-75qh-fqjp published
Dec 28, 2023 by LukeTowersLow -
Stored XSS through privileged upload of SVG fileGHSA-wjw2-4j7j-6gc3 published
Jul 7, 2023 by LukeTowersLow -
Prototype pollution in Snowboard frameworkGHSA-3fh5-q6fg-w28q published
Oct 26, 2022 by bennothommoLow -
Bypass of CMS Safe Mode Security FeatureGHSA-q37h-jhf3-85cj published
Jul 15, 2022 by LukeTowersModerate