Packagist/winter/wn-backend-module: low 2
Winter: Stored XSS through Backend List widget image columns
Action: Upgrade winter/wn-backend-module to 1.2.14 or later.
composer require winter/wn-backend-module:1.2.14Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.1.0 | 1.2.14 | - |
Fixed versions
| 1.2.14 |
Sources
- osv: GHSA-7mpf-4465-7fc2
- https://github.com/wintercms/winter/security/advisories/GHSA-7mpf-4465-7fc2
- https://github.com/wintercms/winter/commit/0941c9816181095fe35d58e78e6d0c4a49238967
- https://github.com/wintercms/winter
- https://github.com/wintercms/winter/releases/tag/v1.2.14
published · modified · JSON