Packagist/winter/wn-backend-module: medium 4.5
Winter: Reflected XSS through the search query parameter in the backend Table widget
Action: Upgrade winter/wn-backend-module to 1.2.14 or later.
composer require winter/wn-backend-module:1.2.14Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.0.420 | 1.2.14 | - |
Fixed versions
| 1.2.14 |
Sources
- osv: GHSA-hq84-x37p-j6q5
- https://github.com/wintercms/winter/security/advisories/GHSA-hq84-x37p-j6q5
- https://github.com/wintercms/winter/commit/1b6397654124fb44a6abf6f3782b6a1d746cef14
- https://github.com/wintercms/winter
- https://github.com/wintercms/winter/releases/tag/v1.2.14
published · modified · JSON