winter/wn-cms-module vulnerabilities (Packagist)
3 vulnerabilities.
-
winter/wn-cms-modulePackagist Winter: Broken access control in `Cms\Controllers\Index` allows cross-template actions and unauthorized asset uploads 6.8 Medium -
winter/wn-cms-modulePackagist Winter Affected by Stored Cross-Site Scripting (XSS) in Asset Manager 0.0 None -
winter/wn-cms-modulePackagist Winter CMS Modules allows a sandbox bypass in Twig templates leading to data modification and deletion 8.5 High