Packagist/winter/wn-backend-module: medium 4.5
Winter: Stored XSS through cached Brand Settings and Editor Settings custom styles
Action: Upgrade winter/wn-backend-module to 1.2.14 or later.
composer require winter/wn-backend-module:1.2.14Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.2.14 | - |
Fixed versions
| 1.2.14 |
Sources
- osv: GHSA-5cwr-5jxg-pcf6
- https://github.com/wintercms/winter/security/advisories/GHSA-5cwr-5jxg-pcf6
- https://github.com/wintercms/winter/commit/c95d780ab54f3a3f74a94ae1667bf12b3c549d5d
- https://github.com/wintercms/winter
- https://github.com/wintercms/winter/releases/tag/v1.2.14
published · modified · JSON