Wintercms

Winter CMS Local File Inclusion through Server Side Template Injection

Winter CMS before 1.2.13 Twig Sandbox Escape via SecurityPolicy

Winter CMS: Template Injection

Winter: Privilege escalation by authenticated backend users

Winter vulnerable to Prototype Pollution in Snowboard framework

Winter CMS: ImportExportController AJAX handlers bypass granular import/export permission gate

Winter CMS vulnerable to stored XSS through privileged upload of SVG file

Winter: Stored XSS through Brand Settings custom styles

Winter CMS before 1.2.13 Local File Inclusion via JavaScript

Winter: Stored XSS through Editor Settings custom styles

Dusk plugin may allow unfettered user authentication in misconfigured installs

Winter: Authenticated backend users can bypass Users controller permission checks

Winter CMS: Authentication Bypass by Alternate Name

Winter CMS: Path Traversal

Winter CMS: Reflected XSS through the search query parameter in the backend Table widget

Winter CMS: Stored XSS through cached Brand Settings and Editor Settings custom styles

Winter CMS: CSRF through AJAX handler names reachable as backend page actions

Winter CMS: Incomplete List of Disallowed Inputs

Winter: SQL Injection in Backend Filter Widget numberrange Scope via numbersFromAjax

Winter CMS: My Account preview exposes another backend user's profile by record ID

Winter CMS: Authorization Bypass Through User-Controlled Key

Winter CMS: Stored XSS through Backend List widget image columns

Stored XSS through privileged upload of Media Manager file followed by renaming

Winter CMS Stored XSS through Backend ColorPicker FormWidget

Winter Affected by Stored Cross-Site Scripting (XSS) in Asset Manager