Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

packagist

winter/wn-backend-module

packagist

Backend module for Winter CMS

View on github.com · View on packagist.org

Security Advisories for winter/wn-backend-module in packagist

Moderate
about 1 month ago

Winter: Reflected XSS through the search query parameter in the backend Table widget GSA_kwCzR0hTQS1ocTg0LXgzN3AtajZxNc4ABk-z

packagist winter/wn-backend-module
Moderate
about 1 month ago

Winter: CSRF through AJAX handler names reachable as backend page actions GSA_kwCzR0hTQS1wMmNoLWMyYzMtNHhtNc4ABk-y

packagist winter/wn-backend-module
Moderate
about 1 month ago

Winter: Stored XSS through cached Brand Settings and Editor Settings custom styles GSA_kwCzR0hTQS01Y3dyLTVqeGctcGNmNs4ABk-x

packagist winter/wn-backend-module
High
about 1 month ago

Winter: ImportExportController AJAX handlers bypass granular import/export permission gate GSA_kwCzR0hTQS1mbTI5LTRtcTMtcGhnNs4ABk-w

packagist winter/wn-backend-module
Moderate
about 1 month ago

Winter: My Account preview exposes another backend user's profile by record ID GSA_kwCzR0hTQS1tcG13LWY2aDYtM2cyNs4ABk-v

packagist winter/wn-backend-module
Low
about 1 month ago

Winter: Stored XSS through Backend List widget image columns GSA_kwCzR0hTQS03bXBmLTQ0NjUtN2ZjMs4ABk-u

packagist winter/wn-backend-module
Moderate
about 1 month ago

Winter: Local File Inclusion through @import directives in LESS compilation of backend customizable stylesheets and theme assets GSA_kwCzR0hTQS01OGZwLW1jeDYtN3FmOc4ABk-o

packagist winter/wn-backend-module
Moderate
about 1 month ago

Winter: Authenticated IDOR in backend FileUpload widget allows cross-user access to attachment metadata GSA_kwCzR0hTQS0zMjc3LWg4ZzktcWo1Zs4ABk-W

packagist winter/wn-backend-module
High
about 2 months ago

Winter: Authenticated backend users can bypass Users controller permission checks GSA_kwCzR0hTQS1qNWpxLWNyNjgtdjJ4eM4ABihG

packagist winter/wn-backend-module
Moderate
about 2 months ago

Winter: SQL Injection in Backend Filter Widget numberrange Scope via numbersFromAjax GSA_kwCzR0hTQS1tN2pjLWc0cmMtam12aM4ABihE

packagist winter/wn-backend-module
High
about 2 months ago

Winter: Stored XSS through Editor Settings custom styles GSA_kwCzR0hTQS12Z3A0LTJmYzQtcWZmMs4ABihD

packagist winter/wn-backend-module
High
about 2 months ago

Winter: Stored XSS through Brand Settings custom styles GSA_kwCzR0hTQS12N2NmLThnaDktZ3htas4ABihC

packagist winter/wn-backend-module
Critical
7 months ago

Winter vulnerable to privilege escalation by authenticated backend users GSA_kwCzR0hTQS1wZ3BmLW04bTQtNmNnNs4ABTiW

packagist winter/wn-backend-module
Low
almost 3 years ago

Winter CMS Local File Inclusion through Server Side Template Injection GSA_kwCzR0hTQS0yeDdyLTkzd3ctY3hycc4AA4Je

packagist winter/wn-backend-module
Low
almost 3 years ago

Winter CMS Stored XSS through Backend ColorPicker FormWidget GSA_kwCzR0hTQS00M3c0LTRqM2MtangyOc4AA4EN

packagist winter/wn-backend-module

Filter by Severity

Moderate 7 High 4 Low 3 Critical 1