winter/wn-system-module
Composer · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Winter CMS Stored XSS through privileged upload of Media Manager file followed by renaming | winter/wn-system-module | Composer | Low | Fix reported | |
| Winter: Authenticated Twig sandbox escape in CMS SecurityPolicy (bypass of CVE-2024-54149) | winter/wn-system-module | Composer | High | Fix reported | |
| Winter: Local File Inclusion through =include directives in JavaScript asset compilation | winter/wn-system-module | Composer | Medium | Fix reported |