winter/wn-cms-module vulnerabilities

CVEs whose affected-version data names the winter/wn-cms-module package (composer). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-32639Medium· 6.8

3w ago

Winter CMS is a content management system built on the Laravel PHP framework

Winter CMS is a content management system built on the Laravel PHP framework. In versions up to and including 1.2.12, the CMS section's Theme Editor AJAX handlers did not enforce per-template-type permission checks, allowing a backend us…

▾ Sunlitwinter · winter/wn-cms-moduleEPSS 0.28%via NVD