package

Packagist/winter/wn-cms-module

pkg:packagist/winter/wn-cms-module

MEDIUM6.8Packagist

Winter: Broken access control in `Cms\Controllers\Index` allows cross-template actions and unauthorized asset uploads

Modified: 8/12/2026

—0.0Packagist

Winter CMS has Stored Cross-site Scripting (XSS) in Asset Manager

Modified: 2/6/2026

HIGH8.4Packagist

Winter CMS Modules allows a sandbox bypass in Twig templates leading to data modification and deletion

Modified: 9/10/2026