winter/wn-system-module vulnerabilities (Packagist)

3 vulnerabilities.

• winter/wn-system-module Packagist Winter CMS before 1.2.13 Twig Sandbox Escape via SecurityPolicy CVE-2026-79774 Fix available 9.3 CriticalAugust 20, 2026
• winter/wn-system-module Packagist Winter CMS before 1.2.13 Local File Inclusion via JavaScript CVE-2026-79773 Fix available 6.9 MediumAugust 20, 2026
• winter/wn-system-module Packagist Stored XSS through privileged upload of Media Manager file followed by renaming CVE-2023-52083 Fix available 2.0 LowDecember 28, 2023